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HTML Update 
In the Pipeline 

Rogue browser builders 
take over aging spec 

BY ANDY PATRIZIO 

What gives? While the World 
Wide Web Consortium is sol- 
diering on with XHTML 2.0 as 
the future for Web markup, a 
small group calling itself the 
Web Hypertext Application 
Technology Working Group 
(WHATWG) has come up with 
what it believes are needed 
improvements to HTML, which 
hasn't seen an update in more 
than seven years. 

The group, which includes 
developers working on browsers 
from Apple and Mozilla, is calling 
its proposed changes HTML 5. 
Some of the features already can 
be found in Apple s Safari brows- 
er and Mozilla s Firefox 1.5. 

According to WHATWG, 
HTML 5 will add new layout ele- 
ments, including a calendar con- 
trol, an address card, a flexible 
data grid, gauges and progress 
meters, drag-and-drop and 
menus; programming extensions 
to the Document Object Model 
(DOM), including server-sent 
DOM events; a formalization of 
the de facto standard XML- 
HttpRequest object, the center- 
piece of AJAX communication; 
and dynamic bitmap graphics 
through the canvas element. 

HTML 5 is also referred to 
by the group as Web Applica- 
tions 1.0. The group claims it 
will retain full backward com- 
patibility with the latest W3C 
release of HTML, which was 
► continued on page 28 



With J Boss, Red Hat Buys 
An SOA Strategy, Competition 



BY EDWARD J. CORREIA 

Red Hat wants to be your SOA 
tools provider. If its acquisition 
of JBoss goes as planned, Red 
Hat will gain an instant presence 
in application server and middle- 
ware markets. It will also gain 
BEA and IBM, among others, as 
competitors. 

Red Hat in mid-April made a 
bid for the open-source Java devel- 
oper — whose products include 
the JBoss Enterprise Middle- 
ware Suite (JEMS)— for US$350 
million in stock and cash plus 
another $70 million tied to per- 
formance incentives. Both compa- 
nies have agreed to the deal, which 



is expected to close on May 31, 
subject to customary approvals. 

Previously, Red Hat's middle- 
ware strategy supported Jonas, 
Tomcat, the LAMP stack and oth- 
er application servers and middle- 
ware, said Tim Yeaton, senior vice 
president of Red Hat Enterprise 
Solutions. "Our strategy is now to 
create a ubiquitous open-source 
platform with an end-to-end SOA 
infrastructure," he said. 

JBoss CTO Sacha Labourey 
said that while the company's 
main asset is its app server, JBoss 
will be ready to deliver an enter- 
prise service bus solution by the 
end of 2006. "We provide solu- 



tions for the infrastructure. For 
that, JEMS is the key. We've 
added rules, a portal and BPM — 
next will be ESB," he said. (See 
"JBoss Rewrites Its Rules, BPM," 
page 28.) 

The deal also would put Red 
Hat in contention for a share in 
the market for high-performance 
online transaction processing 
systems. Last month at Linux- 
World, JBoss unveiled JBoss 
Transactions, an open-source 
distributed system based on tools 
acquired last year with Arjuna 
that it says is competitive with 
products of its two main rivals at 
► continued on page 28 




An ESB is next on the feature list, 
says JBoss' Labourey. 



Arch Rock Putting Feelers 
Out to the Physical World 



Not Big Brother, but 
SOA sensors are afoot 

BY EDWARD J. CORREIA 

If the thought of a global array of 
Internet-based sensors monitorin 
every aspect of the physical world 
conjures up images of George 
Orwell's "1984," relax. It's 
really not that bad. 

At least, not accord 
ing to the founders of 
Arch Rock, who in 
late March unveiled 
their vision of a world 
in which wireless sen- 
sors could be used by 

► continued on page 31 




Sensors like this will expand the 
Internet to embrace the physical 
world, says Arch Rock's Culler. 



Compuware Steels 
For Move Up to ALM 

Adds SteelTrace requirements tool 



BY JENNIFER DEJONG 

In a move analysts see as a 
replacement strategy, Com- 
puware plans to buy a small com- 
pany that makes a requirements 
management tool. 

Detroit-based Compuware 
announced last month that it has 
entered into a definitive agree- 
ment to acquire privately held, 
Dublin, Ireland-based Steel- 
Trace for approximately US$20 
million in cash. Compuware's 
senior vice president for product 
management and strategy, John 
Williams, characterized the deal 
as "the culmination of two years 



of collaboration between Steel- 
Trace and Compuware." But 
analysts said that Compuware is 
replacing its own requirements 
management tool, called Recon- 
cile, with SteelTrace's more 
robust offering. 

The move is clearly a 
replacement strategy, said Carey 
Schwaber, an analyst for For- 
rester Research. "Reconcile was 
weak," she said. While Steel- 
Trace's eponymous management 
tool is not as well-known as those 
offered by Borland, IBM and 
Telelogic, it is "more feature-rich 
► continued on page 24 
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MySQL Lands Solid Transactional Processing System 

Open-source version of SolidDB provides company with post-Oracle options 



BY EDWARD J. CORREIA 

In a move meant to solidify 
availability of a transactional 
storage engine, MySQL has 
convinced Solid Information 
Technology to open some of its 
source code. In exchange, Solid- 
DB has a shot at stardom. 

When Oracle acquired 
Innobase last October, My- 
SQL found that control of its 
transactional storage engine — 
InnoDB — was now in the 
control of one of its chief com- 
petitors. 



With only a few months 
remaining on its contract with 
Innobase, MySQL began 
shopping for alternatives, 
despite assurances from Ora- 
cle at that time that it would 
(and ultimately did) renew 
MySQL's contract to gain 
access to the ACID-compliant 
InnoDB database. 

"Oracle cleaned up the com- 
petitive landscape," said Alain 
Couder, president and CEO of 
Solid, referring to Oracle's 
acquisitions of the Finnish 
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Solid is opening just its storage engine; MySQL's parser, optimizer and 
other components remain as they were. 



Innobase and last February of 
Sleepycat Software. "We have 
been approached by MySQL to 
provide our engine," he said. 

Until now, however, Solid's 
database solutions — including 
its in-memory BoostEngine and 
fault-tolerant CarrierGrade — 
were proprietary. "SolidDB is 
the basis of HP's OpenView, 
which sells 500,000 copies 
every year," he claimed. Other 
major customers include Avaya, 
Cisco, HP, NEC, Nokia and 
Siemens, he added. 

Solid will test the waters 
with the disk-based SolidDB 
first. It expects to make bina- 
ries available by the end of May 
and initial source code in July. 
General availability is set for 
some time in the fourth quar- 
ter. Couder said the company 
may open its other products, 
depending on demand. 

SOLID MIGRATION PLAN 

According to Paola Lubet, Sol- 
id's vice president of market- 
ing and product development, 
existing applications will not 
be affected by the change 
because only the storage 



engine will be substituted. 
MySQL will continue to use its 
existing SQL interface, parser, 
optimizer, caches and buffer. 
"The change will be complete- 
ly transparent to the develop- 
er," she said. 

However, while InnoDB 
and SolidDB provide a com- 
mon API, Couder said database 
data will have to be reconfig- 
ured to work with Solid's data 
format. "That's an administra- 
tive task, not a developer task," 
he said, adding that a migration 
tool will be provided either by 
Solid or by the developer com- 
munity. "That's the beauty of 
the open source." 

According to Stacy Quandt, 
research director with Aber- 
deen Group, "This isn't just a 
replacement strategy, because 
there are potentially perfor- 
mance benefits" of substituting 
InnoDB with SolidDB, she said. 
Lubet provided no actual 
benchmarks, but claimed that 
with SolidDB, MySQL perfor- 
mance would be on par with 
Oracle and its TimesTen trans- 
actional system at about one- 
fourth the cost. 



TenFold Still Betting on Codeless App 

Financial woes aside, its vision is the right one, analysts say 



BY JENNIFER DEJONG 

What if a company could build 
enterprise apps five to 10 times 
faster, without relying on teams 
of professional developers or 
writing a single line of code? 

That is the vision of Salt 
Lake City-based TenFold. And, 
despite financial losses it report- 
ed last month, the company is 
still betting on that idea. "We are 
changing the definition of what a 
development team is," said Jef- 
frey Walker, TenFold's founder 
and chief technology officer. 

In TenFold's view, trained 
teams of business people drive 
development. Working along- 
side IT professionals, they use 
the company's Enterprise Ten- 
Fold offering to configure 
applications, instead of coding 
them. Because there is no code 
involved, TenFold applications 
are less costly to maintain than 
those built by conventional 
methods, explained Walker. 
And because they are based on 



Web services, integrating them 
with existing systems is straight- 
forward, he said. 

Convincing customers to 
adopt that approach won't be 
easy, analysts said. But TenFold 
is headed in the right direction. 
"If TenFold can prove to line- 
of-business analysts that robust 
SOA applications can be built 
without programmers, they 




TenFold has raised the capital to 
allow it to survive, says Felton. 



have a chance at the brass ring," 
said Peter S. Kastner, an analyst 
for Aberdeen Group and a 
former programmer. "TenFold 
is at the right place at the right 
time." 

Configuration, over coding, is 
a key imperative of service-ori- 
ented architectures, added Jason 
Bloomberg, an analyst for Zap- 
Think. "What TenFold is talking 
about is the right approach." 

But its current financial state 
doesn't indicate that. In a tele- 
conference last month, the com- 
pany reported a net loss of 
US$2.2 million for the fourth 
quarter of 2005. Net loss for cal- 
endar year 2005 was $5.4 mil- 
lion. TenFold also announced 
approximately $6.3 million in 
new funding, from two investors. 
"These are not the results of a 
healthy company," said TenFold 
CEO Robert Felton. "But we 
have raised the capital to allow 
the company to survive." 
Investors include Felton, who 



joined the company late last year, 
and Richard E. Marriott, whose 
First Media partnership provid- 
ed earlier rounds of funding for 
TenFold. 

NO COMPILING, NO CODE 

TenFold's codeless develop- 
ment platform, which produces 
Web services, consists of three 
elements, explained Walker, 
who earlier founded and led 
Oracle's applications division. 
"The first is a user interface that 
you use to describe what you 
want to do. The second saves 
what you did in a relational 
database. And the third thing is 
a rendering engine that renders 
the application." 

In roughly 10 keystrokes, 
the user can tell the application 
to store data in Oracle Hi, for 
example, create a table called 
"customer," and build a transac- 
tion that "lets me enter a new 
customer and have a conversa- 
► continued on page 26 




With SolidDB, MySQL would be on 
par with Oracle and its TimesTen 
system, says Solid's Lubet. 

Although actual pricing was 
not disclosed, Couder said costs 
for the solution would be in line 
with MySQL's US$500 to 
$5,000 per-server per-year sub- 
scription price range. TimesTen 
costs about $18,000 per server 
processor with caching. 

Quandt said the move also 
might serve to calm the con- 
cerns of MySQL customers, 
unsure about what Oracle might 
do with InnoDB. Oracle in mid- 
April made good on its promise 
to MySQL, granting the compa- 
ny a multiyear deal to license 
InnoDB. "There's no guarantee 
that the terms will not change in 
the future," said Quandt. "That 
leaves questions with MySQL 
customers running transactional 
workloads and allows Oracle to 
call some of the shots with a 
competitor, which is not advan- 
tageous to MySQL." 

LICENSE TERMS 

Under terms of its agreement 
with Solid, MySQL will be per- 
mitted to sell the SolidDB stor- 
age engine — to be called Solid- 
DB for MySQI^and Solid to 
resell its engine along with the 
upper layer of MySQL software. 
Solid will not resell MySQL soft- 
ware with other storage engines. 
It has not been decided where 
the collaborative development 
community will be hosted. 
SolidDB runs on Linux, Unix, 
Windows, VxWorks and QNX. 

Solid, which was founded in 
Finland and is now headquar- 
tered in Cupertino, Calif., 
once employed InnoDB cre- 
ator Heikki Tuuri, and current 
MySQL CEO Marten Mikos, 
according to Couder. I 
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Offshoring Tide Remains High, Experts Say 



BY ALEX HANDY 

SANTA CLARA — The market 
for outsourcing development 
work has exploded over the past 
two or three years, and there is 
no indication that the tide of 
work leaving U.S. shores for 



overseas destinations will ebb 
any time soon, according to 
Sheng Liang, vice president of 
engineering at mobile e-mail 
developer Seven Networks. 

Liang outlined some of the 
secrets to a successful outsourc- 



ing endeavor during a session at 
the Sand Hill Conference held 
here last month. 

But there are caveats. First of 
all, said Liang, the cost savings of 
offshoring development tasks 
will be realized mostly in the 



long term. Short term, he said, 
companies will likely lose money. 
This is due to setup costs, includ- 
ing those associated with build- 
ing VPNs, software libraries, 
repositories and a knowledge 
base of the offshore team. 



ONE 

Unified Bl Platform 



> < 




ALL 

The Reporting 
Features You Need 



Managed Reporting 
Ad Hoc Query 
OLAP Analysis 
Dashboard in 3 



16,769 

Developers Have 

Experienced the 

LogiXML Difference 

since 2005 because of 



Technology 
Company Culture 
Aggressive Pricing 







Experience the 

PRODUCTIVITY 
Difference 



© 



LogiXML 

wwwJoglxml.c^rn 



Download Our Free Software) 

www.freerep0rting.cDm 

i.aee. ldgixml 



But Peter Harrison, CEO of 
offshoring firm Induslogic, said 
that short-term losses are no dif- 
ferent than those associated with 
the hiring of new help locally. 

"Anytime you add people to 
your team, remote or local, 
there's a learning curve. Differ- 
ent types of workers have dif- 
ferent learning curves." He said 
that learning curves for testers 
are among the shortest, so com- 
panies often start with testing 
and move on from there, once 
they've gotten the knowledge 
transferred. "Once they have 
something on rails for the test- 
ing relationship, it's easy to 
extend to a development rela- 
tionship," said Harrison. 

TO INDIA AND BEYOND 

While both Harrison and Liang 
spend a lot of time talking 
about India, they both also 
acknowledged that the market 
has expanded to other nations. 
Harrison's company has recent- 
ly begun opening relationships 
with developers in the Ukraine 
and in China, and he said that 
these two nations offer special- 
izations that India can't match. 

"Ukraine is very strong in 
analytical-, mathematical- and 
algorithmic-type work," he said. 
He attributed Ukraine's specialty 
to its educational system, which 
has emphasized rocket science. 
China, he said, because of its 
strength in manufacturing of 
hardware, has a strong compe- 
tency in things that are close to 
the metal. "It also helps that they 
have a larger domestic market 
for those products. They have 
twice as many cell phones as 
India," said Harrison. 

Harrison said that from a 
cost perspective, what matters 
more than the country doing 
the development is the city. Just 
as labor costs more in New York 
City than in Raleigh, N.C., for 
example, labor in a tier-one city 
in India can cost twice as much 
as in a tier-two city, he said. 

But no matter what the 
workers are making, Harrison 
believes that outsourcing can 
offer unparalleled productivity 
enhancements for development 
teams. With a testing house 
based in Western Europe or 
Asia, projects can "chase the 
sun," as he put it. It's a 24-hour 
development process, and both 
Harrison and Liang are con- 
vinced that it's the best possible 
way to move projects ahead at 
full speed. I 
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Deferred Expressions, Content Interweaving Join JSP, JSF 



BY ALEX HANDY 

Despite their similar names and 
acronyms, JavaServer Pages and 
JavaServer Faces specifications, 
both part of the Java Communi- 
ty Process, don't play well 
together to offer a seamless 
dynamic Web page creation sys- 
tem. JSPs focus has been on 
dynamic server-side HTML, and 
JSFs on interactive user inter- 
faces. That's changing: The 
recently completed JSF 1.2 and 
JSP 2.1 specifications add more 
powerful content interweaving 
capabilities and deferred expres- 
sions within the new standard- 
ized expression language. 

"The theme... was ease of 
development," said Ed Burns, 
senior staff engineer at Sun 
Microsystems and co-lead for 
JSR 252 (JSF 1.2). "One of the 
things that was difficult was the 
expression language [disparity]," 
which he said led to the idea of a 
unified expression language. 
"We had to bring these new 
innovations that we came up 
with during the JSF 1.0 work 
into the fold with JSP" 

Jan Luehe, another Sun 
senior staff engineer and the 
spec lead for JSR 245 (JSP 2.1), 
said that enhancement to the 
expression language detailed in 
his specification will make Web 
development easier — specifical- 
ly, the introduction of deferred 
expressions. 

"In JSP 2.0 the expression 
language's interpreter only knew 
about expressions that would be 
evaluated immediately while the 
page was rendered. JSF needed 
expressions that could be han- 
dled late," Luehe explained. 
This brought all kinds of back- 
ward-compatibility issues be- 
cause of the syntax for deferred 
expressions, he said. 

For example, in JSP 2.0, 
symbols such as "#" and "{" 
were not defined. As such, JSP 
2.0 would have issues process- 
ing lines beginning with these 
symbols. 

The newly unified expression 
language also brings JSP and JSF 
closer together for collaborative 
uses, said Burns, with content 
interweaving, which improves 
the handling of buffering and 
JSF component tags. "We 
weren't able to depend on JSP 
2.0 when we were [developing] 
JSF 1.0. We had this very com- 
plicated system where we had to 
execute the page and build the 
component tree at the same 



time. This was very complicated, 
and when you have JSF compo- 
nents that have template text, 
they can't really inspect things 
given to them as children." 
The spec team also outlined 



methods for making the ex- 
pression language customizable, 
including making the expression 
language extensible by providing 
a pluggable API that accommo- 
dates different kinds of resolvers 



for different data types. 

Both specs also now support 
annotation, which Luehe said 
allows developers to reduce or 
eliminate the need for J2EE 
deployment descriptors. 



JSP 2.1 should start appear- 
ing in commercial JSP imple- 
mentations soon. JSR 252, the 
spec for JSF 1.2, will be com- 
pleted before JavaOne, said 
Burns. I 
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NEW PRODUCTS 



•4 ICESOFT 

•™ I...a.,k. 



MetaMatrix has released MetaMatrix Query, an embeddable Java dis- 
tributed query component. Java developers can embed in their appli- 
cations a single data service component that handles interactions with 
many different relational databases. The service can be assembled 
from metadata that describes relevant tables from various databases 
in a system, and acts as a JDBC driver through which applications can 
submit SQL . . . ICEsoft Technologies has 
released ICEfaces Community Edition, a free 
AJAX application framework for Java developers to use to develop 
and deploy Web-based applications. The tool provides a component 
suite, including menu, table, tree and tabs, and deploys to most J2EE 
application servers and browsers . . . SOA Software made commer- 
cially available its Service Oriented Legacy Architecture (SOLA) plat- 
form for integrating new distributed applications with CICS mainframe 
applications. The platform, which has been in production at Merrill 
Lynch for more than three years, according to the company, enables 
mainframes to expose and consume Web services. SOLA, numbered 
version 5.0, runs as a set of mainframe applications for publishing Web 
services from the mainframe. It supports WS-Security and WS-Policy 
and features a centralized UDDI repository. Pricing begins at 
US$75,000. 



UPGRADES 



Zend Technologies has announced that PHP, a Web scripting language, 
will be ported to IBM's System i business computing solution. With 
PHP, System i developers will be able to deploy new Web applications 
or create Web front ends for existing applications written in RPG, C, 
C++ or Java. System i customers will have access to more than 10,000 
existing PHP-based components and applications . . . Revelation Soft- 
ware has released Openlnsight for Linux 7.2.1, a repository-based 
application development environment that with a new DataSet Object 
component provides built-in connectivity to the MySQL database as 
well as any ODBC-compliant data source. The DataSet Object runs in 
Revelation's Client/Server Workspace environment for creating and 
managing data components. The environment includes a query win- 
dow, a SQL script-building assistant, a database connection builder 
and a DataSet Object definition tool . . . Lumen Software has 
announced it will release for free Lumenation 6.0, its middleware for 
running AJAX applications from an open-source LAMP infrastructure, 
and its LightBulb SDK. The Lumenation middleware framework 
includes the Lumenation Interactive Desktop System and Lumen Inter- 
active Components, which work with the company's AJAX z-Windows 
engine for delivering fat-client functionality in a browser . . . Parasoft 
has released Parasoft C++test 6.7, an automated unit testing and 
code analysis tool, with a new ability for embedded systems develop- 
ers to automatically generate unit tests for the systematic testing and 
validation of their software on both host and target devices . . . Tarma 
Software Research has announced Tarma Expertlnstall 3.1, a tool to 
create native or Windows setup programs for j- or-- " 
software. New features include fully editable 
installer dialogs, dialog sequences and action 
sequences, and localization support. It is priced at US$249 for a sin- 
gle license and $2,980 for a site license . . . Accelerated Technology 
has released version 1.2 of EDGE Tool Suite supporting Eclipse 3.1. 
The new version includes Dynamic Variant Support, which lets embed- 
ded developers target variants of supported processor families by 
adding the XML files that describe the new process, and now uses an 
Ethernet channel to communicate with the target board in addition to 
a serial interface option . . . LogicLibrary has announced a plug-in 
designed to allow Logidex, a metadata repository, to launch directly 
within BEA's Java IDE Workshop Studio 3.0, providing additional gov- 
ernance for SOA environments . . . Express Logic has unveiled its 
ThreadX RTOS for the MIPS32 34K 
multithreaded processor core family. 
ThreadX provides applications with a performance boost through mul- 
tithreading capabilities of the MIPS MT application-specific extension. 
Meanwhile, the latest version of ORBexpress, an object request broker 
from Objective Interface Systems, ►continued on page 19 
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Microsoft Sketches 
Big Picture Of 
Modeling Plans 

Former Rational architect weighs in 
on software factories, 'UML and more' 



BY JENNIFER DEJONG 

Microsoft's recent delivery of 
Visual Studio Team System 
brought modeling into the fore- 
ground of Microsoft's develop- 
ment environment. Team Sys- 
tem includes Class Designer, 
essentially Microsoft's answer to 
the Class diagram included in 
the Unified Modeling Language. 
SD Times spoke with Jack 
Greenfield, a software architect 
in the enterprise tools group at 
Microsoft, about the new 
release. The former chief archi- 
tect of Rose XDE, IBM Ratio- 
nale UML-based modeling 
tool, explained how Microsoft's 
approach to modeling builds on 
UML, and also discussed how a 
concept known as software fac- 
tories fits into the company's 
modeling plans. 

SD Times: Earlier, Microsoft 
characterized its modeling strat- 
egy as "UML and more." Can you 
elaborate on how the Microsoft 
approach is, and isn't, like UML? 
Jack Greenfield: To understand 
our approach, you have to make 
a distinction between general- 
purpose languages and domain- 
specific languages [DSLs], such 



Jack Greenfield, Microsoft 

as HTML, which describes Web 
page layout. A general-purpose 
language, such as the UML, can 
describe many things, but it 
cannot describe them precisely. 
Our strategy is a more precise 
interpretation of the UML nota- 
tion. We are saying: "Use a DSL 
based on the UML, but tailor it 
precisely to the .NET plat- 
form." People tend to use the 
UML for sketching. They jump 
in, do some diagrams to convey 
what they mean. UML uses 
attributes to represent state. 
But what does an attribute map 
to in C#, for example? 
So, Class Designer is an example 
of a DSL based on the UML? 
Yes. 

How has it been received? 
There are two reactions. The 
everyday Microsoft developer 
says: "This is really nice." They 
like the ease of use, and how it 
shows them what's in their code. 
But [these developers] have not 
traditionally used modeling 
tools, and that is the majority of 
our customers. Others say: "This 
isn't a UML Class diagram." 
They are right. That's not what 
we intended. It's a DSL for visu- 
alizing and manipulating CLR 




FSF Takes on Paperwork, Costs 



BY ALEX HANDY 

The Software Freedom Law 
Center has decided to take on 
the humdrum tasks of manag- 
ing day-to-day open-source 
projects through the formation 
of the Software Freedom Con- 
servancy, created in early April, 
to provide free financial and 
administrative services that 
would help open-source devel- 
opment organizations defray 
some costs of their work. 

"We understand the impor- 
tance of having our legal, 
financial and administration 
houses in order, but our focus 
and energy needs to be on our 
code," said Alexandre Julliard, 
one of the founding members 
of the Wine Project, which is 



building open-source Windows 
APIs for Unix. Julliard is also 
one of the founding members 
of the conservancy. 

"The Software Freedom 
Conservancy gives us the oppor- 
tunity to join with fellow com- 
munity projects to gain needed 
legal and fiscal protections in a 
market where disruptive tech- 
nologies such as open-source 
software sometimes generate 
aggressive actions from other 
market participants," he added. 

The Software Freedom 
Conservancy is now up and 
running; information is avail- 
able at conservancy. software 
freedom.org. Current member 
projects include SurveyOS, 
BusyBox and uClibc. I 



[Common Language Runtime] 
classes. That is what it is, and 
that's why it has properties and 
fields associated with it, not 
attributes. Class Designer gener- 
ates code, and you can customize 
the way code is generated. You 
can use it to describe systems, 
not classes. And you can capture 
properties and use them in your 
code generation. It's a different 
tool with a different purpose. 
Microsoft plans to follow Class 
Designer with additional DSL- 
based tools, such as a sequence 
designer? 

Yes. Not in the next release, but 
it's on the road map. 
What else is on the road map? 
There's lots of change under way. 
But safe to say, we will deliver 
more value along lines we have 
already provided. More features 
for building designers and 
[enabling] code generation. 
IBM fellow Grady Booch, one of 
the UML's inventors, agrees that 
the modeling approaches of IBM 
and Microsoft share some com- 
mon ground. But he has also 
characterized [in a Dec. 3, 2004, 
blog entry] Microsoft's strategy 
as a "rejection of the UML in 
favor of proprietary domain-spe- 
cific languages." How do you 
respond to that? 
We haven't rejected it. We have 
said we recognize that the UML 
is widely used. So let's leverage 
the parts that are widely used, 
including the Class, Sequence, 
Activity, Use Case and Statechart 
diagrams. Every company makes 
pragmatic decisions. No compa- 
ny that makes UML tools does 
everything the standard speci- 
fies. If you look under the hood, 
you will see that there are no 
[100 percent] UML-compliant 
tools on the market. UML com- 
pliance is a sliding scale. 
The term modeling has tradi- 
tionally been associated with 
the UML. So, is Microsoft 
attempting to redefine what 
modeling means? 
Yes. In the past, modeling has 
► continued on page 21 
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JavaOne to Be Showcase for Glassfish 

Conference will also focus on non-Java languages, such as Groovy, Jython 



BY ALEX HANDY 

This year's JavaOne confer- 
ence, to be held at San Fran- 
cisco's Moscone Center May 
16-19, will focus heavily on 



Java EE 5 and Java SE 6, both 
of which are falling into place 
as their requisite JSRs are ap- 
proved by the Java Community 
Process. According to Sun Mi- 



crosystems spokespersons, all 
JavaOne attendees will receive 
CDs containing development 
kits for initial releases of Java 
EE 5 and its open-source ap- 



plication server, Glassfish. 

On the conference floor, 
some of the highlighted discus- 
sions will be "What is Happen- 
ing With SOA in Open Source," 
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"Develop Rich Competitive 
Applications for Mobile and 
Client Side Environments With 
Java ME Technology Stan- 
dards" and "EJB 3.0, Java Tech- 
nology Persistence, and the 
Web Tier." 

Tim Bray, director of Web 
technologies at Sun, said he 
believes that the secondary 
message of this year's confer- 
ence will be that the Java plat- 
form is beginning to expand 
into a multilanguage environ- 
ment. Bray said that this 
expanding ecosystem holds 
room for more than just Java- 
derived languages like Groovy, 
which shares aspects of Python, 
Ruby and Smalltalk. "I like 
Groovy, but it seems to me like 
it's taken a long time to get 
ready. I'd love to see Groovy 
make it to the big time, but 
they're not there yet." 

Among the most ready for 
production is Jython, he said of 
the all-Java implementation of 
Python. "Just recently, we've 
seen this company called Cau- 
cho release a version of PHP 
that runs on the JVM. JRuby 
has made tremendous progress 
as well," said Bray. 

But the real star of JavaOne 
will be Java EE 5, which, bar- 
ring any unforeseen holdups in 
the final days of its component 
JSR approvals, will be ready for 
prime time when the show 
begins on Monday. Attendees 
will be able to learn about the 
latest developments in the 
enterprise edition of the lan- 
guage, including annotations, 
and the increased ease of 
development offered by the 
new software. I 
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IBM Kicks SOA Strategy Into High Gear 



BY EDWARD J. CORREIA 

IBM in April unveiled 11 new 
products and updated 20 oth- 
ers, an effort that it says is 
intended to help drive adoption 
of its solutions for building ser- 
vice-oriented architectures. 

Robert LeBlanc, general 
manager of IBM WebSphere 
software, described how en- 
hancements to the company's 
products will address what he 
called the five key entry points 
for SOA projects. "The first 
three are people, process and 
information. Most customers 
are trying to solve a problem in 
one of those particular areas," 
he said. 

Tackling that issue is Web- 
Sphere Portal 6, which LeBlanc 
said now allows users to start 
building their own services and 
connecting them together into 
composite services. Portal 6 
includes templates for SOA apps 
using BowStreet Portlet Facto- 
ry, which is now integrated. 

The tool now incorporates 
orchestrated workflow and is 
integrated with WebSphere 
Process Server. "This allows peo- 
ple to provide people-centric 
workflows and manage business 
process flows and their state," 
LeBlanc said. Front-end devel- 
opment now supports AJAX. 

A new SOA Dashboard 
framework includes portlets 
that can be modified to focus on 
functions of a particular indus- 
try and map to people s specific 
business elements, he added. 

The remaining two entry 
points, LeBlanc said, are con- 
nectivity and reuse — the ability 
to connect and integrate appli- 
cations and data systems, and 
to expose assets and reuse 
them across common processes 
and applications. 

Addressing these needs is 
WebSphere Service Registry 
and Repository, a new product 
that LeBlanc said provides 
storage and management of all 
the metadata and information 
around services. "This allows 
for the publication of service 
end points and management 
of service metadata for ser- 
vice-level agreements and pol- 
icy enforcement." The system 
also can interoperate with 
multiple registries and reposi- 
tories across an enterprise. 
"That now becomes a federa- 
tion of information" for com- 
panywide component reuse, 
he said. 



An updated WebSphere 
Information Server provides 
unified data management for 
interchange and analysis. "That 
allows [developers] to bring 
information together and under- 



stand the context to provide bet- 
ter quality of service and ensure 
that data is correct." 

Also enhanced are Web- 
Sphere Business Modeler and 
Business Monitor, which Le- 



Blanc said provide real-time 
process-change management 
and indicate how the business 
is doing in a consolidated view. 
The company also updated Web- 
Sphere ESB, WebSphere Mes- 



sage Broker and WebSphere 
Application server; the latter 
includes tooling improvements, 
support for JDK 5 and for SIP, 
which enables VoIP, video-on- 
demand and instant messaging. I 
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Novell Says Mono Is Ready 
For the Enterprise. Really. 

Claims scalability, runtime issues resolved 



BY EDWARD J. CORREIA 

When it released a version of Mono 
1.1.3 in late January, Novell declared 
that its open-source .NET runtime for 
Linux and Unix was feature-complete 
and ready for enterprise deployment. 
Now, it really means it. 



dering Web and GUI applications. 

"We've been working with ISVs and 
found a lot of new problems," most of 
which, he said, involved rendering 
issues with Mono's system. drawing 
library. He is confident that such prob- 
lems have been solved. 



At LinuxWorld in 
Boston in early April, 
the company released 
Mono 1.2 to beta, 
and told SD Times 
that serious scalability 
issues were discovered 
during performance 
testing at the compa- 
ny's Superlab software 
proving ground. Those 
problems, Novell said, 
now have been solved. 

"With 30 clients, 
Mono could barely 
keep up for more than 
a day," said Miguel de 
Icaza, who maintains 
the Mono code, speak- 
ing of the process of 
testing the runtime. 
"Mono was put 
through Novell's hard- 
ening process for 
weeks at a time to make sure it never 
crashes, data never corrupts and that it 
could cope with the load," said de Icaza, 
who also is Novell's vice president of 
developer platforms. 

What they discovered, he said, was a 
runtime that had performed perfectly 
well on a desktop, but quickly bogged 
down when asked to handle the needs 
of multiple users. "There were race con- 
ditions in the Mono runtime when on 
multiprocessor [machines] that would 
not show up on client computers," he 
said. There were also memory leaks and 
a backlog in the thread pool. "More 
threads were coming in than Mono 
could dispatch." 

Solutions to all these problems are 
now complete, de Icaza claimed, and 
include a new threading model. "We've 
made Mono more stable and capable of 
coping with larger loads. We now have 
a separate thread pool for handling 
incoming connections. We know it 
scales up to 400 machines," which 
he said is the number of nodes in 
Novell's testing labs. 

de Icaza said that in addition to an 
intense focus on fixing bugs, the Mono 
team concentrated on testing the run- 
time with third-party components that 
work with Microsoft's display tech- 
nologies, such as those for graphical 
charting, special effects and for ren- 




The Mono runtime 
performed perfectly 
well on a desktop but 
couldn't handle the 
needs of multiple users. 



—Miguel de Icaza, vice president of 
developer platforms at Novell 



"We made sure 
that most of these 
third-party controls 
work, [and] all prod- 
ucts for Windows 
forms and ASP.NET 
will be certified" by 
the time Mono 1.2 is 
released sometime in 
June, he said. 



LINUX PACKAGES 

Also at LinuxWorld, 
the company kicked 
off a Linux applica- 
tion build service that 
it says provides an 
easy means to create 
installation packages 
from source code that 
target SUSE Linux, 
and ultimately a host 
of other distributions. 
The service, which 
includes an installation framework that 
will be part of future SUSE Linux 
distributions, is being previewed 
now at openSUSE.org and will be 
gradually rolled out during this year. 
The free service is expected to be 
ready by June. 

According to Greg Mancusi- 
Ungaro, Novell's director of Linux and 
open source, the framework will great- 
ly simplify the drudgery of preparing 
apps for multiple Linux versions. 
"Packaging is sometimes the hardest 
part of developing open-source pro- 
jects," he said. "We're trying to take 
that tedious work out of the equation. 
This service will make it possible 
for you to take your source code 
and quickly make it run on any 
Linux distribution." 

Debian and Red Hat will likely be 
the next supported distributions after 
Novell's own, he said. 

Novell in late April was set to release 
openSUSE 10.1, the first community- 
developed version of the SUSE operat- 
ing system. Previous versions of SUSE 
Linux were "built behind closed doors," 
and bug testing was limited to a private 
Web site, Mancusi-Ungaro said. 

The distribution contains the latest 
versions of roughly 1,500 components, 
including OpenOffice, Samba and 
GNOME and KDE GUIs. I 
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StreamBase's 
Real-Time Database 
Gets More Real 



BY ANDY PATRIZIO 

StreamBase Systems has up- 
graded its self-titled, real-time 
streaming database to improve 
performance and expand its 
interoperability with other data 
sources. 

StreamBase is the result of 
research by founder Mike 
Stonebraker — who also found- 
ed Ingres and Illustra — and by 
professors and students from 
Brandeis University, Brown 
University and Massachusetts 
Institute of Technology. 

At the core of StreamBase 3.0 
is the Stream Processing Engine, 
which handles data as it comes 
in. This is something SQL simply 
can't do, either because of speed, 
data that comes in out of order 
or other data processing reasons, 
said Bill Hobbib, vice president 
of marketing at StreamBase. 

The Stream Processing En- 



gine can handle multiple 
streams, out-of-order streams 
and large amounts of data from 
IP data sources. It uses inbound 
processing to process data 
before it is potentially stored to 
process tens to hundreds of 
thousands of events per second. 

This speed is becoming in- 
creasingly necessary, said Hob- 
bib. "The world is going increas- 
ingly real-time, where I have to 
react in a fraction of a second. 
There's a whole new league of 
apps coming up where they want 
to react and respond within mil- 
liseconds of the data arriving, 
and a SQL database is just not 
fast enough," he said. 

Hobbib said on a single- 
processor Linux-based comput- 
er, StreamBase 3.0 can handle 
more than 100,000 messages 
per second. With new load-bal- 
ancing, more hardware can be 
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A visual GUI designer comes with StreamBase for developing applications to act on the data. 



brought in to handle a larger 
data stream. StreamBase En- 
gine now runs three times 
faster than StreamBase 2.5, 
Hobbib claimed, and the 
StreamOptimizer has been 
optimized to handle more data 
for near-zero latency data. 



In addition to the database, 
StreamBase comes with a GUI 
for rapidly developing applica- 
tions to act on the data coming 
in. The IDE is Eclipse-based 
and contains a number of com- 
ponents for building an applica- 
tion, such as triggering events 



on certain data points. 

StreamBase 3.0 became gen- 
erally available April 17; typical 
deployments range in price from 
US$95,000 to $300,000 depend- 
ing on processing requirements, 
number of server processors and 
application complexity. I 
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SysML Effort About to Bear Fruit 

Method for modeling complex systems expected to be adopted by OMG 



BY ALAN MOORE 

The goal of creating a cus- 
tomized version of UML 2 
designed to address the specific 
needs of system engineers is in 
sight. On April 26, Object Man- 
agement Group was expected 
to vote for the adoption of 
SysML version 0.99 at its tech- 
nical meeting in St. Louis. The 
vote brings to fruition an effort 
spearheaded by the SysML 
Merge Team (SMT), chaired by 
Sanford Friedenthal of Lock- 
heed Martin. 

The completion of the SMT's 
SysML specification was the 
result of unprecedented coop- 
eration among some of the fore- 
most tool vendors, leading 
industry users, government 
agencies and professional orga- 
nizations. Creating the SysML 
0.99 specification, for which I 
was the specification architect, 
has been a mammoth task in 
which more than 100 man-years 
of effort has been invested. 

SysML is a visual modeling 
language that extends UML 2 
in order to support the specifi- 
cation, analysis, design, verifica- 
tion and validation of complex 
systems that include compo- 
nents for hardware, software, 
data, personnel, procedures 
and facilities. SysML reuses a 
subset of UML 2 concepts and 
diagrams and augments them 
with some new diagrams and 
constructs appropriate for sys- 
tems modeling. 

One of the goals of the 
SysML submitters was to try to 
reuse UML 2 as much as possi- 
ble and avoid making changes 
unless absolutely necessary. The 
SMT defined a subset of UML 
2, called UML4SysML, to re- 
move nonessential concepts and 
then built the SysML profile 
using UML4 SysML as its refer- 
ence metamodel. In the SysML 
Diagram Taxonomy, many UML 
diagrams are directly reused, 
others are modified, and two 
diagrams are essentially new — 



REQUIREMENTS DIAGRAM 

The left-hand side of Figure 1 shows the requirements flowing down 
for a distillation system using the «deriveReqt» dependency, from a 
user requirement, Produce Distilled Water, to a system requirement, 
Boil Water. Produce Distilled Water is traced upward to an original 
document, the Customer Brochure, and is refined by a use case Dis- 
till Water, which will contain more detailed scenarios of use, perhaps 
using sequence diagrams. Boil Water is decomposed into subrequire- 
ments that illustrate other relationships. The «satisfy» dependency 
shows that the boiler provides the required boiler functionality. The 
«verify» dependency from the boiler test test-case is used to verify 
the Boiler Power requirement. The Safety Cut Off requirement is a 
copy of a standard safety requirement. Each requirement has a 
unique ID shown next to the id# tag. The requirement shall statement 
is shown in the compartment labeled "txt" in the lower part of the 
class box. The format shown is only one of a number of possibilities, 
and Ergonomic Profiling can be used to modify the display format to 
correspond to the needs of the audience. The exact capabilities for 
this type of feature will depend on the tool being used. 

INTERNAL BLOCK DIAGRAM FOR DISTILLER 

Figure 2 shows the internal structure of the Distiller block. It has two 
parts: hx, a HeatExchanger; and bl, a Boiler, which are interconnect- 
ed to allow material and energy to flow between them and (via their 
connections to their parent) to external systems. The HeatExchanger 
and Boiler each has a number of flow ports that describe what can 
flow in and out; these are then connected to other compatible ports 
to enable the required flows in this context. The arrows on the con- 
nectors represent item flows, which show the flows that actually 
occur in the system and whose properties can be used in parametric 
models as shown in Figure 3. 

The values compartment of 'hx' and 'bl' show the values for various 
important functional and performance parameters of the blocks. 

PARAMETRIC DIAGRAM 

The parametric diagram in Figure 3 describes the constraints on flu- 
id flow through the Distiller block. The nodes on the right represent 
the item flows on Figure 2 and the five constraints show how the 
parameters of the various generic and specific equations bind to 
properties of the item flows to enforce the flow constraints. Some of 
the equations are shown as attached notes, although a compartment 
in the constraint symbol may also be shown. Note that the flow prop- 
erties have types with defined units. 
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the Requirements Diagram and 
the Parametric Diagram. 

REQUIREMENTS IN SYSML 

One of the two principal exten- 
sions to SysML is support for 
requirements. The require- 
ments stereotype extends class 
to specify the textual "shall" 
statement and capture the 
requirement id, often used for 



Editors Note: With the imminent accep- 
tance of the SysML 0.99 specification, 
SD Times has invited Alan Moore, the 
specifications architect, to help our readers 
understand what it is, what it hopes to 
accomplish and why it might be important 
to you. 

Alan Moore, vice president of product strategy 
for Artisan Software Tools 
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integration with external 
Requirements Management 
systems. The UML contain- 
ment relationship is used to 
decompose a requirement into 
its constituent requirements. A 
requirement is related to other 
key modeling artifacts via a set 
of stereotyped dependencies. 
The «deriveReqt» and «satisfy» 
dependencies describe the 
derivation of requirements from 
other requirements and the sat- 
isfaction of requirements by 
design, respectively. The «veri- 
fy» dependency shows the link 
from a test case to the require- 
ment or requirements it verifies. 
Two key late additions were the 
inclusion of the UML «refine» 
dependency, used to indicate 
that a SysML model element 



is a refinement of a textual 
requirement, and «copy», used 
to show reuse of some standard 
requirement within the current 
requirement hierarchy. 

Only the most basic attribut- 
es of a requirement are covered 
by the SysML specification. 
More specialized requirement 
types can be specified using spe- 
cialization of the «requirement» 
stereotype. Typical examples are 
operational, functional, inter- 
face, control, performance, 
physical and storage require- 
ments. These stereotypes may 
restrict the types of model ele- 
ments that can satisfy or refine 
the requirement. 

The requirements model 
can be shown in graphical, tree 
structure or tabular format. The 



graphical format is called a 
Requirements Diagram. 

BUILDING WITH BLOCKS 

The major structural extension 
in SysML is the Block, which 
extends UML Structured Class; 
it is a general-purpose hierar- 
chical structuring mechanism 
that abstracts away much of the 
software-specific detail implicit 
in UML structured classes. 
Blocks can represent any level 
of the system hierarchy, includ- 
ing the top-level system, a sub- 
system, or logical or physical 
component of a system or envi- 
ronment. A SysML Block 
describes a system as a collec- 
tion of parts, and connections 
between them that enable com- 
► continued on page 27 
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On the Verge of Network Discovery 

First pieces of BMC suite maps dependencies across entire corporate LANs 



BY ANDY PATRIZI0 

BMC Software has introduced a 
pair of network discovery tools 
designed to map all of the hard- 
ware and software configura- 



tions on a network, which it says 
can help find version or perfor- 
mance problems, configuration 
errors and system failures. 
According to BMC, Founda- 



tion Discovery and Topology 
Discovery are the first tools in 
what will be a suite of discovery 
solutions. The initial two perform 
the basics — asset discovery and 



relationship mappings of logical 
and physical dependencies in 
any enterprise application — and 
place their findings in a configu- 
ration management database 
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(CMDB), also provided. 

Foundation Discovery ex- 
plores a network and identifies 
hardware, networking informa- 
tion, servers, desktops and any- 
thing else with an IP address 
running on the network, 
according to Brent Brightwell, 
solutions marketing manager 
at BMC. 

Topology Discovery finds 
application information and rela- 
tionship mappings. A part of the 
topology is a set of blueprints for 
various networks and environ- 
ments, such as a Seibel, VMware 
or J2EE network. Upcoming 
blueprints will cover Microsoft 
Exchange and .NET and others, 
according to Brightwell. 

From there, the total hard- 
ware and software configuration 
is shipped to the CMDB, where 
the data is turned into service 
models to be used for change 
and configuration management, 
he said. Network discovery can 
be as detailed as the administra- 
tors allow. In theory, Foundation 
Discovery and Topology Discov- 
ery can map across multiple 
datacenters, said Brightwell. 

Other configuration manage- 
ment products on the market 
weren't built to solve problems 
such as application dependency, 
according to Brightwell. "They 
don't know how apps are con- 
nected or layered over the net- 
work. They might have desktop 
or server discovery but do not 
know how they are connected 
and related together," he said. 

The benefit for developers, 
he said, is that an in-depth look 
at the network will help map 
everything in an environment 
and see where things break. 
"Wouldn't it be nice to know 
what's broken and what belongs 
to the broken apps? What this 
does is, when paired with an 
application like event manage- 
ment, it narrows things down to 
[the] application or infrastruc- 
ture that is having the issue," 
said Brightwell. 

In addition to mapping an 
environment, the Discovery 
products can determine if com- 
puters are out-of-date or need 
updates or patches, and can 
push the changes to all comput- 
ers that need them, he added. 

BMC Discovery Suite is 
available for US$51,000 per 
network, or $33 per asset. An 
asset can be any piece of hard- 
ware or software. I 
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Quality Center 9 Works With Team System, SAP 



BY ALEX HANDY 

Mercury Interactive has re- 
leased version 9.0 of Quality 
Center, which now supports 
Microsoft's Visual Studio Team 
System and numerous SAP 
applications. Also new is the 
inclusion of integrated SOA 
testing tools to help enterpris- 
es optimize and streamline the 
tools they've built for business 
integration. 

Quality Center 9 also in- 
cludes new versions of Test 
Director and Quick Test Pro — 
both tools have been revamped 
to test SOA and Web services- 
based applications, according to 
Rajesh Radhakrishnan, vice 
president of products for Mer- 
cury. "One of the key things we 
see in the market is a big evolu- 
tion toward SOA and Web ser- 
vices," said Radhakrishnan. 

Another emerging area, he 
said, is rich Internet applica- 
tions such as those created with 
AJAX techniques or Macrome- 
dia's Flash. "We have created 
solutions in terms of automated 
functional testing for the SOA 
and Macromedia worlds, mak- 
ing sure we can support those 
in the best possible way." 

SAP FEATURES 

The addition of tooling specific 
to SAP implementations will 
help solve some of the biggest 
headaches for the NetWeaver 
crowd, which Radhakrishnan 
said have to do with understand- 
ing the impact of changes. "If 
you're at the SAP Quality Man- 
ager, you're sending out a whole 
bunch of changes from the 
development team, and you have 
a limited amount of time to test 
before you roll them out. This 
will allow you to pull out what 
changes are made in SAP, relate 
that to your requirements and 
what requirements are affected." 

The tools help determine 
what the impact will be for the 
business, he continued, and 
which tests have to be run to 
make sure there's no risk associ- 
ated with the changes. 

According to Radhakrishnan, 
Test Director for Quality Cen- 
ter will automatically pull 
changes down from the SAP 
Solution Manager and compare 
them with the requirements 
stored in Mercury's Quality 
Center. "The moment you make 
a change, you know what tests 
need to be run," he said. 

Microsoft's Visual Studio 
Team System is also receiving 



the integration treatment in 
Quality Center 9. The primary 
addition here is the ability to 
track and search for defects list- 
ed in the Quality Center without 
having to leave the Visual Studio 
environment. 



Quality Center also provides 
deeper business process testing, 
and better support for manual 
tests, said Radhakrishnan. "Our 
business process testing is a 
component-based solution that 
allows you to componentize 



your functional tests and make 
them easily usable by busi- 
ness people. It supports both 
automated as well as manual 
components. When you start to 
assemble your tests in a compo- 
nent-based way, you can imme- 



diately understand which com- 
ponents are used more often 
and which ones aren't," said 
Radhakrishnan. 

Mercury Quality Center 9 
is available now; pricing was 
not disclosed. I 
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Microsoft Speech Server 2007 
To Add VoiceXML, VoIP Support 



BY ANDY PATRIZIO 

Microsoft in May plans to begin 
beta testing Microsoft Speech 
Server 2007, the first major 
update to the speech recogni- 
tion server since the original 
product was released in 2004. 

Speech Server is a speech 
and telephony platform de- 
signed for contact and call cen- 
ters that provide customer ser- 
vice over the telephone. It 
allows applications to be 
designed to handle both voice 
and DTMF keypad input for call 
routing and access to services. 

Speech Server 2007 adds 
Voice Extensible Markup Lan- 
guage (VoiceXML), the W3Cs 
format for specifying interactive 
voice dialogs between a human 
and a computer. Speech Server 
2004 initially shipped with sup- 
port for just Speech Application 
Language Tags (SALT), a 
Microsoft-backed alternative to 
VoiceXML. SALT was submit- 
ted to the W3C for considera- 
tion but has not been approved; 
the spec stalled at 1.0, and 



Microsoft's home page for SALT 
hasn't been updated since 2002. 

Also new to Speech Server 
2007 is native support for voice 
over IP (VoIP) protocol, Session 
Initiation Protocol (SIP) and 
Real-Time Transport Protocol 
(RTP), all of which allow for 
interoperability with IP telepho- 
ny systems and VoIP gateways. 

Another notable addition is a 
low-level API so developers can 
access the server via .NET 
applications. This means devel- 
opers can write voice-enabled 
applications in C + + or C#. 

"This expands the number of 
developers who can build voice- 
enabled apps, and it expands the 
target market for the server," 
said Clint Patterson, director of 
product management for 
Speech Server. "Many imple- 
mentations of these markup lan- 
guages incorporate proprietary 
extensions because of the limita- 
tions of the language. By coding 
to an API, much closer to the 
metal, developers can build bet- 
ter-performing applications." 



There will also be a Voice- 
XML editor available as an add- 
in to Visual Studio 2005, plus 
other, nonspecified tools and a 
set of speech controls that can 
be added to an ASP.NET Web 
page, according to Patterson. 
Those details will be disclosed 
around the time of the beta. 

Speech Server 2007 will 
come with tools to monitor and 
assess server performance. The 
Analytics Studio, built on SQL 
Server 2005 Reporting Ser- 
vices, will allow developers to 
create their own reports on var- 
ious server performance met- 
rics. This will allow developers 
to zero in on poorly performing 
or poorly designed applications. 
The Speech Server Business 
Intelligence Tools will provide 
managers with a long-term view 
of caller behavior via online 
analytical processing. 

Speech Server 2007 will be 
available in both 32-bit and 64- 
bit versions, according to Pat- 
terson; the final product is due 
in the fall. I 
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MORE UPGRADES, 




< continued from page 8 

supports ThreadX . . . CeTe Software has released DynamicPDF Gen- 
erator 4.0 for .NET, a class library for creating PDF documents pro- 
grammatically from an application, and DynamicPDF Merger 4.0 for 

.NET, a PDF manipulator. New features include linearization, creation 
of interactive form fields, and PDF/X and prepress support . . . Tira 
Wireless has revealed it would be adding support for Microsoft Win- 
dows Mobile to the Tira Jump Product Suite. Tira Jump Product Suite 
enables mobile content developers to control, adapt and deploy 
mobile applications . . . The Sonic Software divi- 
sion of Progress Software on May 1 is releasing Si^j 1 1 
Sonic ESB 7.0, which adds an Eclipse-based integrated development 
environment to its SOA-based integration platform. The IDE provides 
modeling, testing, deployment and configuration of applications 
across an enterprise. Also new in version 7.0 is support for WS-Reli- 
able Messaging, WS-Addressing, WS-Security and WS-Policy, making 
the platform more suitable for mission-critical deployments, the 
company says . . . theKompany.com has announced DataArchitect 
3.5, an update of its tool for designing databases. Among its new 
features are Entity-Relationship Diagram-centric data modeling and 
logical and physical data modeling. It can run on Linux, Mac OS, 
Solaris and Windows . . . WindSpring, which develops data compres- 
SDriflj, sion tools, has released a version of its Data 
'" : Miniaturization Technology for Qualcomm's 
BREW mobile-phone runtime. According to the company, the tool 
reduces the footprint of applications and data without limiting func- 
tionality, allowing developers to deploy applications to a broader 
range of devices that were once off-limits due to resource constraints 
. . . Flux, a Java job scheduler, workflow and business process man- 
agement engineer, now has an AJAX-enabled operations console for 
graphically monitoring jobs and workflows. Version 7.1 of Flux Corp.'s 
tool also adds agents, which allow processes to be executed on 
remote computers. I 



PowerBuilder 1 0.5 
Redoes DataWindow 

Data presentation, access are focus 
of stopgap release of venerable tool 
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BY ANDY PATRIZIO 

Trying to avoid a long lag 
between updates, Sybase has 
released PowerBuilder 10.5 as a 
stopgap on the way to Power- 
Builder 11, due later this year. 
Originally the company planned 
the next release of its venerable 
client/server development tool 
to be fully .NET 2.0-compliant, 
but due to a delay in the release 
of .NET, Sybase's plans slipped 
as well. 

Version 10.5 provides cus- 
tomers with some long-demand- 
ed upgrades and improvements 
without waiting for .NET 2.0 
support. Customers who pur- 
chase 10.5 with a maintenance 
subscription will get version 11 
when its released, according to 
Sue Dunnell, senior product 
manager for PowerBuilder. 

PowerBuilder 10.5 supports 
Oracle lOg, and includes native 



drivers for Sybase ASE 15.0 and 
SQL Server 2005. The rest of 
the changes are related to per- 
formance of the tool itself, plus 
presentation and some other 
compatibility improvements. 

First up are enhancements 
to the DataWindow, the core 
technology of the tool, particu- 
larly to data presentation and 
data access. The new presenta- 
tion style offers a tree-view 
style that allows hierarchical 
data to be easily displayed. 
Complex forms now have auto- 
sizing of height for all bands in 
a report, not just the main band 
in which the data resides. 

PowerBuilder apps are also 
getting a facelift with support for 
GDI+ and rich text controls. "A 
lot of PowerBuilder customers 
have said you can see a Power- 
Builder app a mile away. We 
wanted to give them the ability 
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A new tree view within DataWindow allows data to be displayed in a hierarchical manner. 



to update the look and feel to 
provide a more modern look and 
feel," said Dunnell. Customers 
can change the look of menus, 
use different-sized bitmaps and 
gradient coloring. 

PowerBuilder 10.5 adds 
support for complex data types 



and security and authentication. 
PowerBuilder 11 begins beta 
testing in May, with the second 
beta planned for August or Sep- 
tember. Also coming later this 
year is DataWindow .NET 2.5, 
which enters beta in the second 
or third quarter of this year and 



will offer a tree-view presenta- 
tion-style WebForm, Web ser- 
vices as a data source and a 
DataWindow Designer Plug-in. 
PowerBuilder 10.5 is avail- 
able now for US$2,995, plus 
$645 for the Upgrade Sub- 
scription Plan. I 
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Adobe Flex-ible Enough to Stretch AJAX Applications 



BY DAVID RUBINSTEIN 

In the past, you could do AJAX, 
or you could use Flex for rich 
Internet applications. Now, 
thanks to a new code library that 
Adobe has made available on its 



Labs Web site, you can do both. 
Among the shortcomings of 
AJAX applications are cross- 
domain data access and storing 
data for access offline, accord- 
ing to Adobe's vice president 



of product development, Jeff 
Whatcott. "We started notic- 
ing in the AJAX/open-source 
community that people were 
starting to hit walls and find 
gaps," he said. "We're able to 



fill those gaps." 

AJAX applications cannot 
access a Web service from a site 
other than the site that is 
loaded, but running Flex's 
Flash Player behind the scenes 
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View and analyze database 
dependencies. In a flash 
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SQL Dependency Tracker™ analyzes your Microsoft SQL 2000 and SC 
2005 databases and produces an interactive dependency diagrar 
SQL Dependency Tracker allows you to map dependencies for all SQL 20( 
and SQL 2005 objects via an interactive display 

You can finally SEE your database, in all its glory. More importantly you can 
now SHOW your databases to anyone with a need to know: your boss, 
your team or your DBA. 

So if you want to see the impact of changes about to be made to your 
database - before impact - SQL Dependency Tracker is the fast, 100% 
accurate and only tool for you. 



Download your free trial from www.red-gate.com/tracker today! 
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gives that ability, he claimed. 
Further, he said, the browsers 
that run AJAX apps usually can 
hold only 4KB of data in cook- 
ies, while the Flash Player can 
extend that to 100KB. The new 
library, called FAB ridge, is part 
of the upcoming Flex 2 release 
and solidifies and extends the 
ActionScript/JavaScript inte- 
gration that Adobe introduced 
last year. FAB ridge gets insert- 
ed into a Flex application to 
make ActionScript classes avail- 
able to JavaScript without any 
additional coding, according to 
the Adobe Labs Web site. 

Flex 2.0 also updates Flex 
Data Services, which performs 
message relaying on a publish/ 
subscribe basis, something 
AJAX applications can't do, 
which limits their usefulness in 
enterprise architectures. 

As for the rich Internet 
application world being seen as 
open versus proprietary, AJAX 
versus Flex and Flash, What- 
cott said, "I don't think people 
are interested in an intergalac- 
tic war. If you started with 
AJAX and you're hitting walls, 
we can help take the AJAX app 
further. AJAX doesn't need to 
fail for Flex to succeed." I 

Watchfire Offers 
Security Service 

BY DAVID RUBINSTEIN 

Some organizations hand over 
access to their overseas develop- 
ment and testing teams, while 
others send out their precious 
customer data applications to be 
hosted externally. Now, along 
comes Watchfire to poke anoth- 
er hole in the firewall, offering its 
App Scan security vulnerability 
assessment software as a service. 

AppScan OnDemand works 
in two ways, according to 
Watchfire CTO Mike Weider: 
Either the organization makes 
its application available via the 
Internet with a URL known 
only to Watchfire, or a virtual 
private network is set up that 
allows AppScan to run the scan 
of the applications. In either 
case, Watchfire stores the 
results of the scan on its site, 
and users log in to their corpo- 
rate dashboard to see results 
and analyses of the scan. 

AppScan OnDemand typi- 
cally costs between US$4,500 
and $7,500 per month, accord- 
ing to Weider. I 



www.sdtimes.com 



Software Development Times . May 1 r 2006 



NEWS 



21 



Microsoft Sketches Modeling Plans 



< continued from page 8 

been used to capture concepts 
in the form of documents at the 
front end of the life cycle. But 
in our approach to modeling, 
models are first-class develop- 
ment artifacts. We treat models 
with the same precision and 
care as we treat [different ver- 
sions of] source code. Models 
aren't about creating pictures. 
They are about creating the 
metadata behind the picture, 
and generating code. 
UML-based tools also generate 
code. 

Yes, that is fair to say. We are 
saying it is easier to generate 
code — good quality code — if 
UML is tuned to the architec- 
ture. When you generate code 
from the Windows Forms 
Designer, for example, it under- 
stands the underlying frame- 
work. The code is API-specific. 
You have spoken widely about 
"software factories," co-author- 
ing one book on the topic ["Soft- 
ware Factories: Assembling 
Applications with Patterns, Mod- 
els, Frameworks, and Tools," 
Wiley Publishing 2004], with 
another in the works. What are 
software factories, and how do 
they relate to Microsoft's model- 
ing strategy? 

A software factory is a pack- 
aged set of guidance to build a 
specific type of deliverable. 
Think of it as a starter kit. 
What I am building has been 
built before, so give me the 
tools for the problem I am try- 
ing to solve and configure 
Visual Studio accordingly. 
Software factories are tuned to 
the big picture and tend to 
contain many DSLs. For 
example, you might have a 
software factory for building 
an e-commerce application. It 
includes information on the 
subsystems of an e-commerce 
site. It tells you what the archi- 
tecture should look like. Then 
you make some tweaks and do 
some tuning. The new book, 
"Software Factories Applied," 
which I am co-writing with 
Mauro Regio, will be pub- 
lished later this year. 
Does Microsoft provide software 
factories, such as the one for 
building e-commerce apps, today? 
No. We are working toward 
delivering full-blown factories. 
But [in the meantime] we have 
built some little factories, 
including the Smart Client 
Baseline Architecture Toolkit 
(msdn.microsoft.com/library 



/Purl =/library/enus/dnpag2/html 
/scbatlp.asp), which develop- 
ers can download today. It 
shows what the architecture of 
smart client looks like and 
includes project templates and 
some Visual Studio scripts. 



What is your time frame for 
delivering full-blown factories? 

You will see them in upcoming 
releases of Visual Studio. But 
the details have not been 
worked out. 
Does Microsoft plan to sell them 



as commercial offerings? 

We are working through our 
thinking there. We know that 
people want them, that they 
want to be given the knowl- 
edge. And they don't want 
[that knowledge to reside in] a 



book on a shelf. 
Do you expect third-party soft- 
ware companies to also offer 
software factories? 

Yes, partners are keen on doing 
that. Especially for vertical 
markets, such as [a software 
factory] for building a Web 
self-service portal for the 
banking industry. I 
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ALM Offerings Grow, 
But Market Splinters 



BY DAVID RUBINSTEIN 

Just as Compuware is beefing up its 
product line to compete in the applica- 
tion life-cycle management space, that 
market is being pulled apart by two of 
the companies that helped create it. 

Last month, Serena — a company that 
helped define ALM — announced its 
focus would be on IT change governance. 
Also last month, Borland introduced Cal- 
iber DefinelT, a requirements definition 
and validation tool that is a piece of a 
four-part release this year in line with the 
company's Software Delivery Optimiza- 
tion strategy. 

Now Telelogic has announced a strat- 
egy to expand its definition of ALM into 
something it's calling Enterprise Life- 
Cycle Management. Its purchase earlier 
this year of modeling tool company 
I-Logix, coupled with the earlier acquisi- 
tions of Popkin Software for enterprise 
architecture, and Swedish company 
Focal Point for portfolio management, 
has moved Telelogic beyond require- 
ments-driven development to encom- 
pass a broader view of the enterprise. 

"We're going after more enterprise 
contracts than we ever did. Now it's 
about automating the life cycle," said 
Telelogic CEO Anders Lidbeck in a 
recent interview. "We have a strong 
ALM solution, and we want to go 
beyond that. There is not just one enter- 
prise life cycle, there are many of them 
within an enterprise. You should have an 



overview of your life-cycle processes." 
Business people, he added, need to 
understand how to align their processes. 

Telelogic's goal is to reach $500 million 
in U.S. revenues in five years, Lidbeck 
said. It hopes to accomplish this by 
improving the performance and capabili- 
ties of the DOORS requirements man- 
agement tool, which owns 40 percent of 
the market and accounts for 45 percent of 
Telelogic's business, Lidbeck stated. A 
new version of DOORS XT is expected in 
July. Telelogic also will improve its Syner- 
gy change management software and the 
Tau UML modeling suite, he added. 

Meanwhile, Serena has left its Appli- 
cation Framework for Enterprise (SAFE) 
technology to the Eclipse Foundation as 
the basis for its Application Lifecycle 
Framework project, according to Matt 
DiMaria, head of worldwide marketing at 
Serena. "SAFE was more about architec- 
ture and less about business value," he 
said, noting that it will no longer be Sere- 
na's message moving forward. "The new 
label is change governance." 

Serena's new vision includes visualiza- 
tion, which helps organizations under- 
stand any changes and assess the potential 
costs and benefits; orchestration, which 
defines the change process and helps in 
determining in which domain — develop- 
ment or operations, for example — the 
change belongs; and enforcement, need- 
ed to ensure the process is adopted 
throughout the business. I 



Compuware Buys Part of ALM Stack 



* continued from page 1 

than you would expect," said Schwaber. 

"Ensuring that it has a credible 
[requirements management] product in 
its portfolio is a good strategy that 
should stand [Compuware] in good 
stead," said Ovum analyst Bola Rotibi in 
a report published on the London-based 
company's Web site last month. 

Compuware insisted the SteelTrace 
tool is not a replacement in its suite, 
yet avoided referring to Reconcile by 
name. "We will maintain the capability 
to manage test requirements as an 
integral part of the QACenter solution 
long-term, as a complementary capa- 
bility with integration from Steel- 
Trace," said Williams. He noted that 
SteelTrace is already integrated with 
QACenter, enabling the requirements 
tool to generate test plans that are exe- 
cuted in Compuware's testing suite. 
The requirements tool is also integrat- 
ed with OptimalJ, Compuware's Java 
development tool, he said. "This trans- 
action represents the natural progres- 
sion of our long-term relationship with 
Compuware," said SteelTrace founder 



and chief technology officer Fergal 
Mc Govern. 

ALM r AND MORE 

In any case, the acquisition strengthens 
Compuware's position in the application 
life-cycle management market, said 
Rotibi. "If there were any doubt about 
Compuware's ambitions as a serious appli- 
cation life-cycle management provider, 
then its purchase of SteelTrace should go 
some ways to dispelling this." 

The move may also elevate Com- 
puware's standing in the portfolio manage- 
ment arena. The company plans to inte- 
grate Changepoint, its software for 
managing IT projects, with SteelTrace, 
said Williams, but no further details were 
provided. Integration with Changepoint is 
promising, said Schwaber. "It would 
enable Changepoint users to drill down 
from high-level information about projects 
to specific requirements — and to share 
requirements about multiple projects." 

Under the terms of the deal, all of 
SteelTrace's current employees will join 
Compuware. The company did not indi- 
cate when it expects to close the sale. I 
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Tenfold Is All In With Codeless Apps 



< continued from page 5 

tion with them," Walker said. 

The experience is much like 
working with a spreadsheet, he 
added. "Excel, for example, is 
codeless development. It pre- 



sents you with a user interface 
that lets you describe how you 
want your spreadsheet to work." 
Applications built in Enter- 
prise TenFold SOA run essen- 
tially the same way a spread- 



sheet runs in Microsoft Excel- 
there is no compiling or code 
generation. Because such appli- 
cations are stored in a relation- 
al database, modifying them 
doesn't involve digging down 



into the source code, he 
explained. It's a matter of 
adding a new description, or 
changing an existing one, much 
the same way rules are added or 
modified in business rule man- 
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Inspiring New 
Innovations 




agement systems. 

TenFold's technology isn't 
new. It was developed by Walk- 
er in 1993, the same year he 
founded the company Initially 
TenFold built and sold vertical- 
market applications based on 
Walkers technology. It rose to 
heights in the dot-com era. In 
1999, the company was taken 
public by investment firm Gold- 
man Sachs, and in 2000, Ten- 
Fold's stock price peaked at $77 
per share in 2000, and, in the 
past year has ranged from about 
20 cents to about 50 cents. 

SELLING AN SOA STORY 

What is new is TenFold's mar- 
keting messaging. When the 
company delivered the update 
to its development platform 
earlier this year, it for the first 
time positioned the offering as 
a tool for building SOA-compli- 
ant applications. 

"We can coexist with .NET 
and J2EE," said Felton. Al- 
though Enterprise TenFold 
SOA 2006 includes new fea- 
tures, such as support for AJAX- 
enabled Web browsers, the 
underlying technology has not 
changed, he acknowledged. 

"The epiphany was that we 
were producing Web services." 
TenFold is counting on the SOA 
story to drive sales. "We haven't 
completed new sales based on 
that model," said Felton. "We 
hope to report real progress in 
the second quarter" 

How difficult will it be to 
convince customers to abandon 
their current approach to app 
development in favor of Ten- 
Fold's? "It will be very difficult 
for a variety of reasons," said 
Aberdeen's Kastner. First, hid- 
ing all of the technology from 
nonprogrammers is not a simple 
task at all. Second, professional 
programmers use techniques 
that can result in more robust 
and efficient applications, he 
said. "Numerous Visual Basic 
power users have discovered 
that over the years with buggy, 
poor-performing applications." 

What's more, there are 
social issues involved. It's diffi- 
cult to get companies to aban- 
don deeply entrenched ways 
of working in favor of new 
ones. "How is everyone going 
to feel if TenFold obsoletes all 
the fellow drinking buddy pro- 
grammers?" asked Kastner. 

Felton is quick to admit 
there are barriers to over- 
come. "You have to be enlight- 
ened on the IT side, and 
enlightened on the business 
side." I 
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SysML Adoption Expected by OMG 



< continued from page 15 

munication and other forms of 
interrelationships. Ports are a 
special kind of part that give 
access to internal structure 
from the outside of a composite 
object for use when the block is 
used within a larger structure. 
There are two types of ports: 
Service Ports, which support 
client/server communication; 
and Flow Ports, which define 
flows into or out of a block. 

Two diagrams are used to 
describe block relationships, 
the Block Definition Diagram 
(bdd), which is similar to a tra- 
ditional class diagram, is used to 
describe relationships that exist 
between blocks; the Internal 
Block Diagram (ibd) is used to 
describe block internals. 

PARAMETRIC MODELS 

Parametric models are used to 
describe system properties and 
their interrelationships. In 
order to support this type of 
modeling, a new structural fea- 
ture, called a ConstraintBlock, 
has been introduced into 
SysML. A ConstraintBlock 
defines a set of parameters and 
one or more expressions that 
state how a change to the value 
of one parameter impacts the 
value of other parameters. By 
default, these parameters are 
nondirectional and so have no 
notion of causality. These Con- 
straintBlocks are then bound 
via their parameters to system 
properties to enforce system 
constraints. Based on the 
reusable concept of a block, 
new ConstraintBlocks can be 
built by reusing more primitive 
ConstraintBlocks such as basic 
mathematical operators. 

SysML also defines a model 
of value types that can take 
units and dimensions; these val- 
ue types can then be used to 
type parameters in parametric 
models. 

ConstraintBlocks may be 
used to express mathematical 
equations, such as 'F=m*a' and 
'a = dv/dt'; or statistical values 
and utility functions, such as 
might be used in trade studies. 

A special diagram, the Para- 
metric Diagram, has been 
introduced to facilitate this 
parametric viewpoint. It is a 
specialized variant of an inter- 
nal block diagram that restricts 
diagram elements to represent 
constraint blocks, their parame- 
ters and the block properties 



that they bind to. Both parame- 
ters and properties may be rep- 
resented as small "pin-like" 
boxes to help make the dia- 
grams more scalable. 

In addition, SysML provides 



extensions to activities to 
describe the distributed flow of 
material, energy or information 
through a system. These exten- 
sions allow the modeler to 
impose restrictions on the rate 



at which items flow along edges 
in an activity, or in and out of 
parameters of behaviors. 

More than three years from 
the initial request for proposal, 
version 0.99 of SysML looks 



set. The extensions that are 
being made to UML 2 by 
SysML will help systems engi- 
neers more adequately model 
their systems, and at the same 
time the reuse of UML at 
SysMLs core will enable much 
smoother flow down from sys- 
tems engineering to software 
engineering than at present. I 
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Red Hat Buys J Boss, SOA Strategy 



< continued from page 1 

a much lower cost. 

But to Red Hat president 
and CEO Matthew Szulik, the 
big deal is all about SOA. "Red 
Hat is intent on defining and 
improving the development 
model for the needs of 21st 
century computing based on 
open-source and collaborative 
software development process- 
es of open-source software 
products," he said in a telecon- 
ference announcing the agree- 
ment on April 10. 

During the call, Mark Fleury, 
president and CEO of JBoss, 
expressed his excitement about 
the deal, pointing up the similar- 
ities of the two companies. "Red 
Hat has been like our big broth- 
er — we have the same business 
model," he said. He added that 
about 75 percent of JBoss rev- 
enue comes from subscriptions 
for services and secure software 
downloads and patches, and the 
remainder from training and 
other services, which he said 
approximately mirrors Red Hat. 

As for JBoss' relationships 
with its former partners, Fleury 
was optimistic. "We look for- 
ward to continuing to have 
Novell, Oracle and IBM as 
partners. Red Hat will increase 
the reach of JEMS. What you 
will see going forward is taking 
it to the enterprise level with 
stability and scalability." 

During the teleconference, 
Fleury pre-empted questions 
about rumors, which presumably 
included a recent bid by Oracle. 
"I will not comment on rumors. 
JBoss chose Red Hat." 

JBoss revenue grew by 150 
percent in the past year, accord- 
ing to Red Hat CFO Charlie 
Peters. "JBoss revenues are 
growing faster than expenses, 
and we expect a positive cash 
flow within the next quarter or 
two," said Peters. JBoss employs 



about 150 people, all of whom 
will be retained and will offset 
about 100 hires that Red Hat 
had planned. 

TRANSACTIONS 

Among its assets is JBoss Trans- 
actions, which incorporates soft- 
ware acquired in December 
from Arjuna Technologies. That, 
according to Pierre Fricke, 
director of product management 
at JBoss, was the only major 
component keeping JBoss from 
taking on financial institutions 
and other large enterprises with 
complex distributed transaction- 
al requirements. "Without this 
we were there, but we couldn't 
do distributed management. We 



topped off at local transactions," 
he said. 

"Now we can push into the 
scenarios where IBM and BEA 
are playing, except for high- 
end mainframes," said Fricke. 
"We're competitive with Tuxedo 
across the board," he added, 
referring to BE As distributed 
transaction management system. 
The software is free; support 
subscriptions cost US$10,000 
for a server with up to 32 
processors — significantly less 
expensive than the cost of the 
IBM or BEA software and sup- 
port, Fricke noted. 

Transactions, which Fricke 
said uses technology under 
development for about 20 



years, "has long-running and 
proven reliability" and supports 
ACID transactions using two- 
phase commit coordination. It 
also conforms to WS -Coordina- 
tion, WS-AtomicTransaction 
and WS-BusinessActivity specs 
and supports standard and 
optional features of the Java 
Transactional API (JTA) for 
J2EE apps and Java Transaction 
Service (JTS) specs. 

The solution permits high- 
volume Web services transac- 
tions to integrate with servers, 
messaging systems and database 
back ends across client/server, 
mobile, SOA and event-driven 
architectures using CORBA, 
J2EE and Web services. Fricke 



said it also can interoperate 
with IBM CICS and Microsoft 
Transaction Server products. 

Organizations using Trans- 
actions in conjunction with 
JBoss Application Server 4.2 
gain management capabilities 
for distributed transactions, he 
said. The solution also works 
with other Java app servers or 
can stand alone, Fricke added. 

According to Shaun Connol- 
ly, vice president of product 
management at JBoss, the com- 
bined company also is in a posi- 
tion to offer support for this new 
breed of client. "We're well-cov- 
ered. We've got the people to do 
the support, and we're hiring," 
said Connolly. I 



JBoss Rewrites 
Its Rules, BPM 






■ ■ 



BY EDWARD J. CORREIA 

The updated jBPM 3.1 from 
JBoss now offers multiprocess 
language support, including 
BPEL, which vice president of 
product management Shaun 
Connolly said broadens its utili- 
ty for SOA and Web services 
orchestration. "It's not just a 
BPM. People working in XML 
and Web services can work with 
it as well and incorporate work- 
flows in their applications." 

Many Web applications re- 
quire interactions from multiple 
people within an organization, 
he said for example. "Let's say 
that to process an order, a super- 
visor has to approve it, and then 
it goes to another department. 
You can actually use jBPM to 
build all that instead of investing 
in a separate product," Connolly 
claimed. An Eclipse-based Visu- 
al Process Designer "makes it 
easy for business analysts and 



_ 


! ■ 


» 






^H^^Bfck. - 


>■..... 




— 




ir 


53 r 

- 

■ ■ ill tf ■** 




" 


i Ub. 

- - 


■tpt_ 


■■«-r- 


-■■ vmm 






iBiOI^KBulBSBSi-^ 



other nondevelopers to 
create business process 
flows," he added. 

Further simplifying 
page flow design, jBPM 
is now integrated with 
the company's Seam 
application framework. 
"That takes the EJB3 
[spec], marries it with 

JSF and takes the glue jBPM's Eclipse-based Visual Process Designer provides a drag-and-drop interface for 
code out," which Con- business processes creation and editing. Shown is the node layout for a new process 
nolly said enables work- with the process view in the center. 
flows in Web apps to be 
easily programmed within the 
same environment. 

Also released is Rules 3.0, a 
productization of the Java- 
based Drools open-source pro- 
ject. The solution includes a 
rules engine that Fricke said 
helps developers reduce repeti- 
tive software processes by 
implementing policies. 

As an example, Fricke 
described a company offering a 



one-day price special. "A lot of 
programmers would hard-code 
this logic into their applications. 
The problem with that is that 
when a rule changes, you have 
to change the code, recompile 
and redeploy," said Fricke. 
Such specials could be imple- 
mented as rules, and take effect 
and expire by way of the rules 
engine without any changes to 
program logic. "The rules 



HTML 5 Update in the Pipeline 



< continued from page 1 

version 4.1 from 1999. 

Members of WHATWG 
include Brendan Eich, creator of 
JavaScript; David Baron of The 
Mozilla Foundation; Hakon 
Wium Lie of Opera Software; 
Ian Hickson of Google; and 
David Hyatt, a programmer on 
Apple's Safari browser team. 

The W3C is aware of the 



WHATWG project, and is keep- 
ing an eye on it. 

"They went to do their own 
thing and have built some 
momentum. Now we'll see if 
there's interest from the larger 
membership," said Ian Jacobs, 
head of communications for the 
W3C. "This is where W3C kicks 
in; it's a good forum for com- 
munities that have motivations 



that bump up against one 
another. We'll say, let's hammer 
it out here and everyone will be 
better off." 

Meanwhile, XHTML 2.0 is in 
the works, but its finalization still 
could be years away. Steve Bratt, 
CEO of the W3C, said work on 
version 2 will probably pick up in 
the next year or two, and HTML 
5 might benefit from this lag and 



fill in the gap between upgrades. 
"The current thinking is there's 
an opportunity for an incremen- 
tal, not revolutionary, improve- 
ment to HTML 4 and XHTML 
1.1 or both," said Bratt. 

The W3C has been talking 
with the major browser vendors 
about the WHATWG effort- 
most recently at a meeting in 
France — and expects to send out 
a proposal on HTML 5 to those 
vendors in the coming weeks, 
with responses due within four 
weeks after that, said Bratt. I 



engine brings agility to an 
SOA," he said. 

Rules can be implemented in 
any of four ways: imported as 
XML, using a visual Eclipse 
plug-in, input through Microsoft 
Excel decision tables or using 
new Java-like expression lan- 
guage. "Rules can be added pro- 
grammatically, but the engine 
still keeps them separate from 
Java code," Fricke said of the 
new language. 

Fricke claimed that perfor- 
mance of the rewritten Rules 
3.0 is between 10 and 20 times 
faster than prior versions. He 
attributed the speed gains to 
"algorithm tuning and the way 
we've implemented the memo- 
ry-based repository and reim- 
plemented the core engine." 

Like jBPM, Rules 3.0 also 
can run on its own, as part of 
JEMS or with any Java EE app 
server, and subscriptions cost 
US$7,500 for a server with up to 
32 processors. I 
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ESC Finds Way Back to San Jose 

Large number of attendees, exhibitors, according to organizer 



BY ALEX HANDY 

SAN JOSE — After a multiyear 
stint in San Francisco, the 
Embedded Systems Confer- 
ence still attracted more than 
10,000 people for its return 
to San Jose. The McEnery 
Convention Center 
housed the show's 
nearly 300 classes, | SHOW 
tutorials and semi- 
nars and a like number of 
exhibitors, according to orga- 
nizer CMP Media. 

Green Hills Software 
announced the release of a 
smaller version of its Velosity 
real-time operating system at 
the show. Micro-Velosity offers 
a RAM footprint of around 
1,000 bytes and a ROM print of 
1,200 bytes. Green Hills also 
announced additions to its 
Time Machine debugger, in- 
cluding new in-memory data 
collection and an adapter that 
allows for the collection of per- 
formance data through PCI 
slots. All are available now. 

Aonix showed off PERC 
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Ultra, its Java Virtual Machine. 
This new edition of PERC adds 
support for all the upcoming 
Java bells and whistles, includ- 
ing annotations, and other addi- 
tions that will be in Java 5. 
msystems announced its 
new CompactFlash 
modules for industri- 
al uses. The little 
chips hold up to 1GB 
of data on a surface smaller 
than a dime. 

Trolltech was on hand to 
debut Qtopia Safe Execution 
Environment, which leverages 
Linux security features to pro- 
vide a "sandbox" approach to 
securing its Qtopia PIM suite. 
In addition, the company 
offered attendees a glimpse of 
Qtopia's new multitasking, 
management and quick-launch 
start-up capabilities. Also 
announced at the show were 
updated versions of the Qtopia 
Phone, and additions to help 
bring multimedia onto Qtopia 
devices. The company also 
announced that it will provide 



tools for Wind River's Linux- 
based consumer platforms. 

Toshiba announced numer- 
ous new microdevices, includ- 
ing a 32-bit CISC microcon- 
troller designed to use less 
energy and push more bits. The 
company also showed new 
audio/video component switch- 
es and flash microcontrollers. 

Express Logic announced 
the release of ThreadX version 
5 at the show. This new version 
of the company's popular royal- 
ty-free real-time operating sys- 
tem is designed specifically for 
resource-constrained systems. 
The operating system offers 
runtime stack analysis and 
event chaining capabilities. 

Texas Instruments showed 
off all of its newfangled chips, 
including the TI Power Man- 
agement Chip, which is said to 
extend the life of Li-ion bat- 
teries. The company also made 
a joint announcement with 
QNX Software Systems 
regarding the integration of 
TFs DaVinci technology with 



QNX's products. 

Smart Network Devices 
and Hyperstone AG an- 
nounced the release of HyNet- 
OS 3.0. The royalty-free real- 
time operating system is 
designed to work with the 
Hyperstone HyNet32 processor. 

SafeNet brought security 
onto the show floor with its 



announcement of a new multi- 
gigabit security IP core for sys- 
tem-on-chip designs. The core 
can be used by chip makers to 
add high-capacity encryption 
routines to their processors and 
systems. 

Freescale Semiconduc- 
tor announced the RS08 core, 
an 8-bit centerpiece for the 
lowest end of applications. 
The company also laid out its 
road map for a series of 
processors that it says will 
offer 32-bit performance with 
8-bit simplicity. I 
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Arch Rock to Enable SOA-Savvy Sensor Networks 



< continued from page 1 

farmers to monitor rainfall and 
fertilizer consumption, by logis- 
tics companies to track ship- 
ments, by municipalities to 
monitor parking meters and 
bridge and road conditions, or 
by utilities to observe energy 
consumption. 

"With the Internet, 
we've been able to con- 
nect every person to every 
other person," said David 
Culler, co-founder and 
CTO of Arch Rock, a pri- 
vate company based in 
San Francisco. "The opportunity 
now is to connect everything of 
value — to expand the Internet 
to embrace the physical world." 

Culler, a UC Berkeley profes- 
sor, is a former director of Intel 
Research Berkeley and principal 
investigator of DARPA's Net- 
work Embedded Systems Tech- 
nology (DARPA NEST), which 
created the TinyOS open-source 
platform for wireless sensor net- 
works. Arch Rock, which incor- 
porated in May of 2005, last 
March received US$5 million in 
Series A funding from New 



Enterprise Associates, Shasta 
Ventures and Intel Capital. 

TinyOS and its accompany- 
ing TinyDB will form the basis 
for the company's platform that 
will operate and control a series 
of low-power sensors of varying 
makers, sizes and functions. 



-x I 'Formerly, people had to 
f 1 be engineers to set up this 
I type of sensor network.' 

j 
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-Roland Acra, president and 
CEO of Arch Rock 



They will be Internet-connected 
via a wireless peer-to-peer grid, 
and will be Web services- and 
SOA-sawy. TinyOS already runs 
on dozens of platforms, Culler 
said, including those based on 
microcontrollers and processors 
from ARM, Intel and Texas 
Instruments. Specifics will be 
announced later this year. 

Arch Rock president and 
CEO Roland Acra, said the idea 
is to offer tools that can be used 
by people without specialized 
skills. "Formerly, people had to 
be engineers to set up this type 



of sensor network," he said. "We 
will be providing users with the 
ability to create meaningful, 
content-specific data that origi- 
nates as sensor bytes." 

The platform, Culler contin- 
ued, will "embrace and extend 
WiFi and GPRS and have lots of 
ways of getting from 
the physical to the 
informational world." 
That's not to say that 
devices won't come 
and go. He said the 
software will be able 
to adapt to changes as 
batteries die, and as nodes fail or 
are destroyed. "Sensors won't 
have people baby-sitting them, 
so they have to have flexible net- 
working capabilities. That's 
where Web services come in, to 
bring information into the chan- 
nels and to act on it and inte- 
grate it within the broad setting 
of information on the Internet." 
Unlike Orwell's vision of the 
Big Brother government, which 
scrutinized the movements of 
every citizen, sensor networks 
will be more akin to a captive 
stepchild. "This technology isn't 



focused on observing people 
and their actions but on the 
world in which we function," 
said Culler. "It's focused on 
growing the food we eat, get- 
ting it where it needs to be safe- 
ly and for utilizing the technol- 
ogy for different kinds of 
awareness and understanding 
so we can take wiser actions." 

"The prevailing set of radio 
protocols," added Acra, "are of 
low power for longevity and 
duration," he said, and conse- 
quently are safe from prying eyes 
because of their somewhat limit- 
ed range. "It's a local phenome- 
non. You make it global by cou- 
pling it with the Internet, but 
you can control that." 

Asked where sensor networks 
would be in five years, Culler 
said, "Sooner or later, sensors 
will become a large majority of 
the devices on the Internet. 

SUN IS SPOT-ON 

Culler is gratified by efforts like 
Sun Microsystems' Small Pro- 
grammable Object Technology 
(SPOT) sensor project, which in 
May is set to release a hardware 



and software kit that includes a 
CLDC JVM that runs directly on 
the sensor processor. "It's an 
important part of the market 
maturing. The sense of integrat- 
ing physical information into the 
Internet and programming envi- 
ronments is good validation for 
what we see as the future." 

The programming models of 
the two platforms are similar. 
"You can build system capabili- 
ties in Java as objects, and that 
was at the heart of the design of 
TinyOS — you can compose sys- 
tems from building blocks that 
are robust," Culler said. Lan- 
guages available for data manip- 
ulation are those of high-level 
enterprise systems, including 
Perl, Python, Java and .NET As 
development gets closer to the 
nodes, languages are constrained 
by the hardware. "We operate in 
ANSI C extended to provide 
ease of constructing protocols." 

Culler explained the symbol- 
ism behind the company's chosen 
name and logo. "An arch rock is a 
bridge in the natural world. And 
we're bridging the physical world 
to the information world." I 
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Registries or Repositories? 



BY CAROL WEISZMANN 
AND SUSAN MESSENHEIMER 



^fe s deployments of service-orient- 

/ ., ed architectures (SOAs) sur- 
/"""■\ vive initial pilot projects and 
lAft Jb begin to spread into more 
extensive use, there's a need to better 
organize, access and manage runtime 
metadata such as XML schemas, SOAP 
messages and WSDL interface defini- 
tions. Spreadsheets and Web page list- 
ings of services no longer suffice. 

"SOA registries are playing a key 
role in development, specifically in 
assembling composite applications," 
said Sanjay Sarathy, vice president of 
marketing at Above All Software. 
"Here, you're trying to integrate multi- 
ple systems, and you need a place 
where you can store the metadata and 
the artifacts from those disparate 
pieces." 

For purposes of reuse, the only way 
to properly store metadata is in an SOA- 
type repository. "And it's important not 
just to store the metadata," Sarathy 
added, "but to use the registry to con- 
sider the relationships across the differ- 
ent elements. Ultimately, you're creat- 
ing a virtual application portfolio that 
cuts across your development efforts no 
matter what application environment 
you're dealing with." 

Various kinds of metadata manage- 
ment solutions are currently in use, but 



most provide only limited support for 
managing runtime metadata. That's 
because general-purpose metadata 
repositories haven't been designed or 
optimized for runtime environments 
and cannot manage detailed, implemen- 
tation-level metadata. In contrast, reg- 
istries deliver more focused manage- 
ment of runtime artifacts (for example, 
services and directories), although they 
generally lack the breadth and depth of 
repository functionality. 

Gartner analysts Michael Blechar 
and Jess Thompson, in "When to Use 
Metadata Repositories, Registries or 
Both," offer an analogy: 

"Registries play a role similar to that 
of a card catalog in a library. As a cata- 
log points to the books a reader needs to 
access, an SOA registry points to the 
services a requester needs to access. 
Repositories manage metadata about a 
broader set of artifacts [such as] 
libraries, card catalogs, books, and 
processes such as checking a book out 
and returning it." 

These days, however, emerging SOA 
deployments are blurring the distinctions 
between repositories and registries. 
Repository solutions have begun to 
incorporate what Gartner calls 
"registry-light capabili- 
ties," while ^ _jiy** 



REPOSITORIES VERSUS REGISTRIES 




Here's how Gartner analysts Michael Blechar and Jess Thompson, in "When to Use 
Metadata Repositories, Registries or Both," compare repositories and registries: 

"Repositories primarily support the management of metadata at the contextual, 
conceptual, logical, and physical levels of detail. Repository parsers and bridges can 
access and load metadata from a variety of sources, such as business process mod- 
eling tools, database schemas, and Universal Description, Discovery and Integration 
(UDDI) directories. However, they extract only a subset of the metadata used by 
those tools. Conseguently, they house limited detail about metadata at the imple- 
mentation level. 

"Registries primarily focus on the implementation-level information needed to 
support the deployment, operation, and management of metadata. Registries also 
include other selected types of metadata from the higher levels (for example, a ser- 
vice registry might include the names and descriptions of the business processes 
and services being used). Currently, the greatest overlap is in the area of the SOA 
spoke repositories and service registries." 



registries are including metadata beyond 
what's required for runtime artifacts. 

KEY FEATURES OF AN SOA REGISTRY 

"A full-featured SOA registry needs to 
provide the ability to register, discover 
and access Web services as well as pro- 
vide a place to associate service descrip- 
tions (WSDLs) and other associated 
metadata, such as XML schemas, trans- 
formations, BPEL descriptions, etc.," 
said Cindy Hayden, senior manager for 
Web services and XML gateway integra- 
tion at Atlanta-based credit-card 




provider CompuCredit. "It should also 
provide full change management capa- 
bilities." 

Added Ben Moreland, assistant direc- 
tor of foundation services in The Hart- 
ford's eBusiness & Technology organi- 
zation: "An SOA registry should include 
user-friendly design-time lookup, dy- 
namic binding capabilities, governance 
over the submission, approval and pub- 
lication of new services, and adherence 
to the UDDI [Universal Description, 
Discovery and Integration] standard." 
Especially useful for maintenance pur- 
poses, he noted, is an ability to track 
consumer-producer relationships in 
both directions. 

UDDI also is seen as 
^jk central to an SOA registry 

'■" ' tm *f by Greg Meyer, chief tech- 
nology officer at iJET Inter- 
national, which provides risk 
monitoring and management 
services to multinational cor- 
porations via a highly automat- 
ed Intelligence Operations Cen- 
ter. "At the most basic level," he 
said, "the features, capabilities 
and requirements of an SOA reg- 
istry are met by the existing UDDI 
specification: maintain standardized 
information about Web services, 
record the capabilities of those Web ser- 
vices, and list any location and require- 
ments information about those Web ser- 
vices." 

The classic UDDI phone book 
model isn't enough, though. "Effective 
registries provide tools, or a starting 
point, for governance activities, such 
as reporting and asset control, as well 
► continued on page 34 
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as providing mechanisms to 
map business taxonomies to 
the registry," iJET's Meyer 
observed. 

Beyond the basic UDDI 



specification, an SOA registry's 
most valuable function, he 
believes, lies in providing dif- 
ferent views for different 
consuming populations. "An 
effective SOA registry should 



include a user interface that 
bridges technology and busi- 
ness: Views should be able to 
be customized to a wide vari- 
ety of consuming groups." 
IBM WebSphere product 



manager Sunil Murthy spelled 
it out: 

SOA repository features: 

"Storing a fine-grained model 
of service metadata artifacts — 
beyond handling WSDL, XSD, 
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etc., as BLOBs, discovering 
metadata instead of relying on 
users to manually populate the 
repository." 

SOA registry features: "A 
rich set of capabilities for seman- 
tic annotations of service metada- 
ta to support service advertise- 
ment (i.e., explain what my 
service does so that people can 
understand it without crawling 
through the WSDL), rich queries 
using semantic annotations, 
and rich classification models 
beyond simple taxonomies." 

SOA governance features: 
"Life-cycle definition and sup- 
port for managju7ed transitions 
between life-cycle states (includ- 
ing validation), change notifica- 
tion, impact analysis and a fine- 
grained access control model." 

DESIGN-TIME VS. RUNTIME 

Brent Carlson, co-founder and 
vice president of technology at 
LogicLibrary, added another 
kink: "It's important to differen- 
tiate between a design-time 
registry and a runtime registry." 

A runtime registry, he ex- 
plained, provides dynamic 
lookup capabilities for SOA- 
based applications to retrieve 
deployed service instances. A 
runtime registry must be capa- 
ble of responding in real time to 
operational application loads 
with a limited set of informa- 
tion, and its interface is primar- 
ily programmatic. 

"Runtime registries such as 
LDAP have been used success- 
fully for service lookup," Carlson 
reported. "In general we're see- 
ing either integrated E SB/fabric 
registry capabilities or, to a less- 
er degree, UDDI registries take 
on this responsibility. "A design- 
time registry, meanwhile, pro- 
vides contextual information 
about candidate services for use 
by application developers. A 
design-time registry must pro- 
vide a much richer set of infor- 
mation to developers working 
within their SDLC environ- 
ment, and its interface is primar- 
ily GUI (and ideally IDE-inte- 
grated) in nature. 

"Legacy mainframe reposi- 
tories are not well-suited to 
support design-time service 
registry functionality," said 
Carlson. "Their metamodels 
tend to be more aligned with 
data element metadata man- 
agement, and their user inter- 
faces are not well-integrated 
with modern SDLC tools." 
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Chris Warner, director of technical 
marketing at Software AG, asserted that 
a complete "registry/repository" solu- 
tion is one that "combines SOA-specific 
Web services administration features — 
i.e., a registry — with features that are 
common to many developer-centric 
repositories, such as organization-spe- 
cific metadata and management of 
reusable code fragments." 

While non-SOA entities like ware- 
house metadata dictionaries and enter- 
prise metadata repositories include 
such capabilities as life-cycle manage- 
ment, metadata management and secu- 
rity, it's the focus on standards-based 
interfaces for consumers, producers 
and administrators that characterizes 
SOA — and the standards-based nature 
of the SOA objects managed by an SOA 
registry/repository. 

"This standardization," said Warner, 
"allows development/operations teams 
to utilize a loosely coupled development 
tool set, much like the loosely coupled 
SOA they are building." 

Charles Stack, CEO of Flashline, 
sees SOA as a very different way of 
thinking of IT functionality. "Issues like 
centralized Web services, service-level 
agreements, systematized software asset 
reuse, in-place versioning, dynamic pro- 
visioning, cross-enterprise functionality, 
project governance, service life-cycle 
management and common taxonomies 
must all be addressed." 

Among key benefits of an SOA reg- 
istry/repository, he noted, are being able 
to reduce duplication, reuse functionali- 
ty and remix Web services to compose 
and recompose business processes. 

"Also," Stack said, "governance lies 
at the core of an SOA registry/reposito- 
ry, ensuring that Web services and oth- 
er software assets deliver expected 
results and align with the architecture 
and business goals. It's important to 
look at governance throughout the 
entire service life cycle, from planning 
through runtime. Applying governance 
during the early stages of planning and 
design can head off runtime service 
interruption." 

Jason Bloomberg, senior analyst at 
consultancy ZapThink, offered a heli- 
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copter's-eye view: "As services in the 
enterprise proliferate and companies 
build out their SOA implementations, the 
structure of corporate technology teams 
must change to enable flexible, agile ser- 
vice development, testing and support." 

Such efforts will stretch far beyond 
simply using the registry, which is ulti- 
mately just one of many elements in the 
service life cycle, and companies will 
rely on what Bloomberg calls "service 
life-cycle teams," composed of diverse 
personnel from both IT and lines of 
business, including business analysts, 
architects, developers, testers and sup- 
port staff. 

"Fundamentally, SOA cannot scale 
without effective collaboration among 
the members of these teams," asserted 
Bloomberg. "Furthermore, as enter- 
prise SOA implementations grow, con- 
sistent communication among such 
SOA implementation teams must allow 
participants to collaborate regardless of 
each individual's role, skill set or devel- 
opment environment." 

LEVERAGING NON-SOA METADATA 

The SOA registry features and capabili- 
ties now emerging are a definite 
improvement over existing non-SOA 
registries/repositories that development 
and operations teams have been using, 
said The Hartford's Moreland. 

"Current non-SOA registries are not 
UDDI-compliant and do not provide 
governance around service submission 
and publication," he pointed out. "They 
rarely provide easy-to-manage tax- 
onomies or make for easy consumer- 
producer relationships." 

However, the skills required to create 
non-SOA registries are transferable. 

"Given that some non-SOA registries 
are very sophisticated and require wide- 
ranging skill sets," said iJET's Meyer, "an 
argument can be made that if one has 
the ability to create a non-SOA registry, 
existing skill sets are sufficient for creat- 
ing an SOA registry. 

CompuCredit's Hayden agreed. 
"Teams that are building an SOA reg- 
istry need to have a full understanding of 
SOA concepts and be skilled in Web ser- 
vice creation and deployment. Ideally 



they should have experience in applica- 
tion integration and have a complete 
understanding of remote object access 
concepts." 

Added Moreland: "Companies look- 
ing within their organization for skilled 
employees to create an SOA registry 
should first turn to their enterprise 
architects, then their database support 
people and finally their data modelers." 

iJET's Meyer distinguished between 
development and operational issues. On 
the development side, success depends 
on something that those building non- 
SOA registries may not possess: an inti- 
mate understanding of UDDI. Opera- 
tionally, he said, "the skill sets should 
focus on the ability to render registries 
for a wide variety of consuming groups, 
so business and stakeholder understand- 
ing is important." 

Meyer also pointed out that "some of 
the existing [and emerging] SOA reg- 
istries and registry tools are very sophis- 
ticated, user-friendly and powerful. This 
provides not only the granularity and 
detail necessary for the developer, but 
also the consolidated, nontechnical 
interface for the business user." 

The ability to rapidly assemble and 
create relationships among different ser- 
vices is fundamental to SOA-based 
development, noted Above All Soft- 
ware's Sarathy "In an SOA world, that 
requires a different registry than the one 
you use to manage governance and ser- 
vice policy — but the two need to be inte- 
grated." 

Using registries and repositories 
appropriately takes organizational disci- 
pline, observed Randy Heffner, vice 
president of the application develop- 



WHAT ROLE UDDI? 



ment and infrastructure research group 
at consultancy Forrester Research. 

"This," he said, "means things like 
correctly populating services, correctly 
describing services, providing quality 
services that people can trust, having the 
discipline to look for existing services 
before building new ones, etc. Without 
these disciplines, you will waste money 
putting a registry or repository in place." 

What, then, are the best ways for 
development and operations teams to 
leverage their existing skills in creating 
an SOA registry? 

"First," advised Sandy Carter, vice 
president of SOA and Web services at 
IBM, "step back and identify the core 
business processes that will be leveraged 
in the SOA." 

The team that does this work should 
include representatives from of all parts 
of the organization. "Once business 
process redundancies are streamlined," 
Carter continued, "the team can collec- 
tively share and determine which busi- 
ness processes, best practices and Web 
services will be applicable to other parts 
of the organization for reuse. The true 
value of an SOA is that it leverages exist- 
ing skills and doesn't require develop- 
ment or operations teams to have to 
learn new skills in order to create an 
SOA registry." 

Flashline's Stack advised focusing on 
the "A" in SOA. "The most important 
thing is to take advantage of the archi- 
tecture group within the organization," 
he said. "If you don't have an architec- 
ture group, be sure to leverage the expe- 
rience and skills of architects, and 
approach SOA as an architectural initia- 
tive with a business imperative." I 




"One could argue that non-SOA registries provide all of the discovery, description 
and location capabilities of today's SOA-based registries," said Greg Meyer, chief 
technology officer at iJET International. 

The primary difference between the two, he said, is the widely embraced indus- 
try standard specification, UDDI (Universal Description, Discovery and Integration). 

More Than a Registry: Randy Heffner, vice president of the application develop- 
ment and infrastructure research group at consultancy Forrester Research, 
explained. "Before v3.02, UDDI was only a registry," he said. "With v3.02, UDDI pro- 
vides some very basic raw materials for it to be used as more of a repository— but 
no standards for how to do so." 

UDDI, noted Heffner, operates more as part of the development life cycle, much 
as a traditional repository would. "As UDDI becomes used more and more as a 
repository," he said, "then the difference has more to do with the use of emerging 
WS standards for policy, reliable messaging, transactions, security, etc.— each of 
these creates metadata to be controlled within the repository." 

Interoperability and Federation. With UDDI as the center post, Meyer advised, 
"it's now possible to realize two things that were simply not possible in the past: 
interoperability and federation. With a standard specification like UDDI, disparate 
and large communities can create registries, and the services described in these 
registries can be easily consumed by a wide variety of consumers." 

And it does not stop there. "Taking this interoperability concept to the next lev- 
el," Meyer noted, "a standard specification allows the creation of federated reg- 
istries, or multiple registries that can be viewed as a single entity." 

-Carol Weiszmann and Susan Messenheimer 
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Red Hat 2.0 

Red Hat's acquisition of JBoss is a big gamble. But perhaps it's 
the only way for Red Hat to catapult itself back into the fore- 
ground. While once synonymous with Linux, free software and the 
open-source movement, the high-flier became just one of the pack. 
No longer a darling of the media like it was in the heady dot-com 
boom days, Red Hat evolved into a mature software supplier, satisfy- 
ing businesses with Enterprise Linux while stoking the enthusiast with 
Fedora Core. 

Buying JBoss gives Red Hat's Matthew Szulik more than simply an 
application server. Red Hat is buying the buzz and enthusiasm that 
JBoss and Marc Fleury have garnered. Able to take on J2EE giants like 
BEA, IBM and Oracle, JBoss has successfully expanded its product fam- 
ily into the JBoss Enterprise Middleware Suite, with app servers, object- 
relational persistence tools, portals, business process management, busi- 
ness rules, object-data caching, and most recently, transaction 
management. It's been a very impressive evolution, often lauded as the 
most successful for-profit business model based on open-source soft- 
ware since, well, Red Hat. 

But is JBoss worth US$350 million now, with additional payments of 
about $70 million if it hits its performance goals? That's a lot of money. 
While JBoss has been privately held, various estimates of its annual rev- 
enue vary from $30 million to $50 million. If those numbers are right, 
then Red Hat is paying quite a premium. What is it getting? Not only the 
buzz and JBoss' drive for innovation, but for the first time, the ability to 
offer most of a server software stack based on its own bits. (Like BEA, 
Novell and Sun, but unlike IBM, Microsoft and Oracle, Red Hat's stack 
still lacks its own enterprise database.) When you wrap services around 
the licensing costs, this could be a good business. 

Is the business good enough to offset that steep price, though? 
That's the bet that Szulik & Co. are placing. If they pull it off, 
they'll eat like kings; if not, Red Hat, whose most recent fiscal-year 
revenue was US$278 million, could be crippled for years. But given 
that the company had more than $1.1 billion in cash in its war chest, 
the odds are certainly in its favor. We predict that the new buffed-up 
Red Hat will make inroads against all the J2EE players, picking low- 
hanging fruit from BEA, IBM and Oracle's application server busi- 
ness, while battling with Sun's also-open-source stack. Folks, it looks 
like a winner. 

Whats Happening to ALM? 

Do you use the term Application Life-Cycle Management, and the 
acronym ALM? Do your developers and managers refer to the 
SDLC, or the Software Development Life Cycle? If you're in the 
development tools and platforms industry, then you probably love to 
talk about ALM and SDLC. If you're an enterprise development man- 
ager, those terms don't factor into your daily conversations or enter- 
prise plans. You probably instead talk about processes, methodologies 
and tool chains. 

That's OK. The industry loves its terminology and jargon, especially 
when that jargon helps describe what a software company's complex suite 
of products and services actually does, or when it distinguishes one com- 
pany's products from another. 

Unfortunately, many of the terms that companies in our industry are 
using to describe their innovations and product offerings are increasing- 
ly bland. As we reported last issue, Wind River doesn't talk about embed- 
ded software development, but instead promotes Device Software Opti- 
mization. Most recently, Telelogic is eschewing ALM and SDLC for 
ELCM, or Enterprise Life-Cycle Management. And what about Serena's 
SAFE, that is, the Serena Application Framework for Enterprise, or Bor- 
land's Software Delivery Optimization, or IBM's SOA Governance Life 
Cycle? Ahh, marketing. I 



Letters to the Editor 



OFFSHORED CODE THE WORST 

Regarding the Gordon Brooks piece in 
the Opinion section of SD Times ["Soft- 
ware Development: A Core Competen- 
cy?" April 1, page 32], I'd like to respond 
with some of my own observations. 

The process of building software is a 
highly intuitive game of insight, requir- 
ing workers to come together in ways 
that more closely resemble how great 
chamber orchestras, world-class ballet 
companies or legendary rock-and-roll 
bands come together, not the way car or 
textile workers come together. 

If those human beings have to work 
long, hard and carefully to hone the 
communication of insight and intuition 
with each other in the same room, work- 
ing across continents will make that all 
the harder and less productive. I know 
this because I have worked on both sides 
of the outsourcing equation. Offshored 
code is the worst code I have ever seen, 
having the highest defect rates per line, 
which tend toward a codebase that is 
immune to innovation. A local team will 
always be cheaper, faster and better than 
an offshore team if it is managed well 
and the process by which great software 
is made is understood by the people 
doing it. On the other hand, people who 
do not understand how great software is 
made will not notice the problems with 
offshoring the work. 

Software that is nontrivial and that 
provides real or new value will never be 
something that can be distilled into a rote 
process or a mere "construction" activity. 

Finally, quoting Thomas Friedman's 
"The Earth Is Flat" is like looking at a 
Norman Rockwell painting and believ- 
ing in that very narrow, superficial ver- 
sion of America. Friedman is not known 
for his depth of knowledge; he's known 



for his thin platitudes about globaliza- 
tion and his citing of highly placed 
sources that do not "touch the ground" 
often with what they claim. 
Nick Bauman 

ECHO RESONATES 

I know Allen Holub is pretty smart, but 
sometimes I think he doesn't look 
around very much (like his article on 
JasperReports — I'll get back to that). 

In "Two Sides to AJAX Toolkits" 
[March 15, page 37], he says: "If you 
have the resources, and need Visual 
Basic-style-mindless-programmer devel- 
opment, there is no real competition to 
General Interface." Have you looked at 
Echo2? It is based on Echo, which has 
been around for more than a few years. 

What Echo2 has going for it: 

1. The API is free. 

2. It has a component project 
(EchoNG) that is free. 

3. It can be coded without an IDE. 

4. It is like coding a Swing app. 

5. It does have an IDE for those who 
want/need it. This is not free. But it is 
very good. It is a plug-in to Eclipse. It 
works so well, you barely know you are 
doing Web apps (the app launches on an 
embedded Jetty engine). 

I would say that, based on these 
things, it is more than competition for 
GI. Echo2 is not perfect. But I've not 
encountered anything that was. 

And back to JasperReports. While I 
(currently) prefer BIRT, JasperReports 
is not as bad as he made it seem to be. I 
was able to download I Reports and start 
developing reports in a few minutes. No 
need to compile any sources first. 

But back to GI. I agree. It costs too 
much. There is too much available. 

Mark Nuttall 





Which of the Following IDEs 
Do You MOSTLY Use? 


DATA WATCH 


1 




Htrttoft Visual ftiriifr .NET 


Z£.BWl 


n 


EtUpu 12.7% 




HttnOTediSfctiiiJU 


7,fi» 


ti-aclcDctelftjo Suite 


JKJff 






Borland JBillder 


5.1% 






IBM WttSphtrc Studio 


4*4% 




Sun Jm s+wSd : 4_4%- 




IBM Ph : i.:< ::! BevEtaper 3.9% 




HrtflBora • 3,3% 




BEA WebL44k Workshop 'J3M 






Sua StiKfc KK* Wfortmfl |^7% 








Borninc [ff fljildEr JJE-4% 








cadefflirnnr 1.9% 








(Itiier 14,S% 






I 


□ a n i 

»™ "til 1 ctvtva i£ ■ t iTAraur | ■ J0W, f wx, J W J r>! Cf 1 It C 1 D" * ft Hi 


1 ffl B ■ H 

per; (/ft Fin ftp 



www.sdtimes.com 



Software Development Times . May 1 r 2006 



OPINION 



37 



SOA: Ready, Set, Go? 



Lance Hill 



Service-oriented architecture is the 
"Web 2.0" of enterprise applica- 
tions. As a result, the increased adoption 
of SOA will have a significant impact on 
the IT department itself as it will further 
accelerate the industrialization of IT. 

In making this transition, the IT 
organization must come to terms 
with three important questions: How will 
I manage my SOA? How will I 
pay for my SOA? How will 
I staff my SOA? 

One of the principal items 
separating SOA from just a 
bunch of Web services is disci- 
pline and vigilance around gov- 
ernance and life-cycle manage- 
ment. And while technology 
such as common registries and 
service monitoring for SLA 
compliance will play an impor- 
tant role in overcoming these challenges, 
the brunt of these needs must be met 
through new management practices as 
these are essentially process requirements. 

The challenge that every organization 
faces is that the shift from Web services 
to SOA means that the status of a specif- 
ic service is no longer the concern of just 
a single developer, but rather is now an 
enterprise concern as SOA represents 
an entirely new class of shared assets. 
What's needed as a result is an enter- 
prise-level organization that can enforce 
governance, resolve disputes and ensure 
optimal life-cycle management. 

Forward-looking enterprises can de- 
fine these shared service organizations as 
their SOA Center of Excellence. Building 
upon the approach that proved successful 
with earlier Integration Competency 
Centers, each SOA Center of Excellence 
will not only serve as the stick for enforce- 
ment, but will also deliver the carrot for 
adoption by creating a development cul- 
ture in which we actually track and reward 
appropriate examples of reuse. 

CULTURE OF REUSE 

Of course, creating this culture of reuse 
is not a simple task. With good reason, 
developers are notoriously gun-shy about 
using components or services that lack a 
verifiable pedigree for performance. An 
SOA Center of Excellence can help over- 
come this concern by going beyond the 
concept of registry, which simply identi- 
fies the location of a specific service, to 
create a corporate repository in which 
quality-of-service statistics highlighting 
runtime performance are readily avail- 
able for evaluating each service s suitabil- 
ity for a specific application. 

Unfortunately, all of these activities 
incur additional costs that must be 
addressed in order to create a successful 
SOA. For example, the up-front cost of 
developing a service is typically higher 
than standard development, with long- 
term operational costs associated with 




each subsequent reuse being another 
factor to consider. The challenge is that 
these costs are most likely borne by the 
group that initially develops the service 
as opposed to the one that ultimately 
benefits from later usage. Forethought 
needs to be applied within your SOA 
strategy to address this inequity before it 
negatively impacts adoption. 

As a starting point, enter- 
prises must accept the fact 
that the long-term benefits of 
SOA require an up-front 
investment in the form of 
higher development costs, 
and they must budget accord- 
ingly. As such, some form of 
stipend — for example, an 
overhead fund for all of IT or 
a per-project surcharge — is 
typically needed to ensure 
that these additional requirements don't 
negatively impact the budgets associated 
with current projects. 

When entering these discussions and 
deliberations, it's important to come 
armed with the necessary facts for sup- 
porting your claims. For example, a 
recent Gartner case study found that 
Superpartners, an Australian-based 
mutual fund administrator, was able to 
realize 30 percent to 40 percent reuse of 
existing services and interfaces through 
the use of an SOA. As such, the initial 
premium paid meant that 30 percent to 
40 percent of subsequent IT requests 
could be met with minimal additional 
investment. Extrapolating this point of 
view further, the Aberdeen Group 
recently suggested that a US$10 billion 
firm with a $300 million annual IT bud- 
get can save $30 million annually after 
five years of implementing SOA within 
75 percent of its projects. 

The additional operational costs relat- 
ed to subsequent reuse should be 
addressed through usage-based pricing 
so that the original developer does not 
incur these costs. As these fees are typi- 
cally a pro-rated portion of the overall 
infrastructure costs associated with main- 
taining and delivering the service, the 
challenge is in eliminating the fluctua- 
tions that can inhibit adoption. For exam- 
ple, lower-than-anticipated usage would 
mean a higher- than-budgeted expense. 

Fortunately, these negative conse- 
quences can be avoided through the use 
of enterprise funding to smooth out 
these shortfalls. The reason that this is 
possible is that the "profits" associated 
with greater-than-anticipated usage, 
which would produce higher-than- 
expected fees, can be relegated to this 
fund as well — averaging out the entire 
SO As cost benefit equation. 

Finally, it's important to consider how 
SOA will impact everyone's role within 
the IT organization. In reality, change 
management is one of the biggest hur- 



dles to be overcome in SOA adoption. 

As SOA isn't just technology, but 
rather an IT strategy for business trans- 
formation, it will serve to further trans- 
form the role of the CIO. They'll no 
longer be viewed as simply the C-suite's 
IT guy (or gal) as they'll now be known 
as strategic business managers. For 
those that recognize the need to create a 
service-based business vision to accom- 
pany their SOA, they're poised to 
become one of the most influential exec- 
utives in their organization. 

In many organizations today, the IT 
architect is a tactical role associated with 
creating and maintaining the plumbing 
needed to deliver application functional- 
ity. Forget that. If governance and life- 
cycle management are the overriding 
requirements for SOA, the enterprise 
architect must take a true leadership role 
in defining, implementing and enforcing 
the associated standards. If this role does 
not currently exist at the enterprise level, 
the CIO should create one as a core 
component of deploying an SOA. 

SOA PROCESS ARCHITECT 

By separating business logic from the 
need for hard coding skills, SOA also 
enables a new role for business ana- 
lysts — a position that I'm calling the 
SOA process architect — which will allow 
them to go beyond just defining the 
business' IT requirements, as they're 
now able to actually implement these 
changes from their desktop directly into 
the development cycle. 

Strategically, SOA shifts much of the 
development environment from hard 
coding to process assembly, which places 
an even greater premium on traditional 
integration skills. To capitalize on this 
chance to expand their role and influ- 
ence, these existing "integrators" must 
bolster their Web services management 
skills to deliver the discipline needed to 
effectively manage the entire asset life- 
cycle of the service. 

Finally, with SOA driving the further 
industrialization of IT, the craftsmen and 
artisans of IT — our developers — are 
directly confronted with the emergence 
of the assembly line as the new metaphor 
for application development. To thrive in 
this context, software developers need to 
enhance their embrace of both enterprise 
architecture and process assembly skills. 

In the end, nearly any of these func- 
tions could realistically assume suprema- 
cy within an SOA environment, but my 
hunch is that the role of an enterprise 
architect will grow the most. How can 
they ensure this? By becoming the custo- 
dians and owners of their organization's 
SOA Center of Excellence. 

Ultimately, SOA promises big bene- 
fits but requires big changes. It's time to 
embrace these changes with a balanced 
mix of prudence and excitement as SOA 
portends an entirely new world for IT. I 

Lance Hill is vice president of product 
and solution marketing for webMethods. 
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Three Blind Bugs 



I wanted to write a column about micro- 
formats, Web 2.0 and Tim O'Reillys 
conversation with Bill Gates, which 
made Microsoft's leader seem out of 
touch with several of the most important 
trends in the industry. I also wanted to 
talk about Atlas, Microsoft's AJAX tool, 
which I've dismissed too quickly in the 
past. But instead I'm going to talk about 
three bugs that afflicted me. 

One bug comes from my open-source 
blog software, which is written in 
ASP.NET backed by C#. The error man- 
ifests as an erroneous complaint about 
the location of an antispam blacklist con- 
figuration file. Another bug is in my 
Ruby on Rails configuration, which when 
I try to run the Web server, complains of 
a bad file descriptor. The third bug is in 
a C program, which "when run with the 
taskbar unlocked, the area of the screen 
that should be the taskbar grabbable 
window edge is rendered as pure white." 
There are three types of bugs: easy, 
wicked and infuriating. Easy bugs are the 
ones that, when encountered, immedi- 
ately point to the root cause: "The but- 
tons should be aligned vertically" or "The 
tax calculation should be 4.5 percent, not 
450 percent." They take minutes to fix 
(well, one of my cardinal rules of debug- 
ging is that every defect takes at least half 



a day to fix, but easy bugs allow for cof- 
fee breaks during that time). There are 
always lots of easy bugs in the initial 
phases of a project, and rapid swatting of 
those easy bugs raises confidence about a 
team's defect-removal rate. 

Wicked bugs are the ones whose solu- 
tions rely on data structures and algo- 
rithms: "The calculation takes 
four hours to run" or "The n 
character's arms can intersect 
the walls." Wicked bugs are 
challenges that programmers 
dream of, but they are all too 
rare: Months and even years 
can go by in between such 
challenges. 

Then there are the infuri- 
ating bugs, by far the most 
common after the initial 
phase of a project, whose manifestations 
are not tied intimately to the defect loca- 
tion. Often, they are the result of a 
wrongful assumption earlier in the pro- 
gram's execution. Hopefully, that 
assumption is memorialized in a variable 
and not in an erroneous execution path. 

One of the major benefits of object- 
oriented programming is that in a good 
design, the number of variables visible at 
the manifestation point of an infuriating 
bug will be low (functional programming 



Windows &. NET Watch 



has a similar characteristic). And while 
people often talk about the benefit of 
automatic memory management, struc- 
tured exceptions with meaningful stack 
traces are, to my mind, at least as signifi- 
cant a contribution to productivity. 

Stack traces and visibility can help 
localize the problem, but often a defect 
defies even that. The "white edge" 
taskbar problem involves the tangled 
realm of Windows screen-updating 
algorithms (complete with "happens on 
some machines" and "some 
resolutions"). Even if you 
can identify the erroneous 
| assumption (in the blog soft- 
ware defect, the logic shows 
that even on an initial hit, 
the software is expecting the 
Web session to have been 
^ff initialized), making a change 

far away from the defect 
manifestation is nerve- 
wracking. We've all intro- 
duced defects by "correcting a mistak- 
en assumption" only to find out that the 
assumption is relied upon in many oth- 
er places. 

Infuriating bugs are hard to fix and 
maintain, and often require chunks of 
ugly code that are difficult to refactor out 
into their own "FixForlnfuriatingBug" 
class. Even when an update claims to 
have addressed issues relating to the root 
cause of the defect, six months later 
you're likely to have forgotten all the 




details of the manifestation and its corner 
cases. While unit tests help greatly in 
documenting fixes, to the extent that 
infuriating bugs are related to wrong 
assumptions, unit tests that reiterate the 
assumption can give false confidence. 

Infuriating bugs plague us. They crop 
up later in the process, they freeze 
progress, and they resist quick fixes. 
When we recognize one, we're demoral- 
ized because we realize that the person 
supplying a library or tool isn't magically 
immune to the same problems we face. 

In a recent "News on Monday" 
newsletter, SD Times' Alan Zeichick 
suggested that Microsoft drop backward 
compatibility for its next major operat- 
ing system. It's far too late to make such 
a change in Vista, but one wonders what 
could be achieved before the 2010-era 
release of "Vienna," Vista's successor. 

While "build one to throw away, 
because you will anyway" is a famous 
software imperative, several major pro- 
jects in the 1990s showed that rebuild- 
ing can take much longer than anticipat- 
ed. Nonetheless, it's fun to fantasize 
about how much faster, more secure and 
capable a Window clone would be if all 
of the code associated with infuriating 
bugs and backward compatibility were 
trimmed from the codebase. I 

Larry O'Brien is a technology consul- 
tant, analyst and writer. Read his blog at 
www. knowing, net. 
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Java Scripting: Languages Count 



One perspective frequently expressed 
by developers is that language fea- 
tures don't matter much; it's the libraries 
and APIs that count. This view greatly 
overstates the case for APIs. Libraries 
are important. And languages that have 
meager libraries are unlikely to gain 
traction until their libraries become 
healthy subsets of the functionality 
found in Java or .NET. (This, I might 
add, represents a change from the olden 
days, when languages such as C, 
COBOL and Fortran could find wide 
adoption despite having little in the form 
of standardized libraries.) However, fea- 
tures of the language play a key — fre- 
quently decisive — role. Were this not 
the case, there would be no need for 
both VB.NET and C#. 

Likewise, there would not be a 
bumper crop of languages that run on 
the JVM. This latter development is par- 
ticularly on point, because many lan- 
guages that translate down to Java byte- 
codes are designed specifically to 
sidestep the tedium of coding in Java. 
And the more you code in Java, the more 
its unnecessary verbosity grates. I am 
looking to give up coding in Java, but I 
want to retain access to the Java libraries 
and the portability of the JVM. 

Fortunately, there are several interest- 



Integration Watch 



ing options. All of them, however, share a 
key limitation: They are used by a very 
small universe of developers. So, the tools 
are not great and the code you're cutting 
will be yours forever. Maintenance at 
work or attracting contributors to your 
personal projects will be limited (but not 
impossible, as these languages 
are all easy to learn). There are 
two broad groupings: the ports 
of other languages to Java and 
the true scripting languages. 

In the former camp, we 
have the most widely used 
option, Jython, which is a Java 
implementation of Python. 
Know Python and, but for 
some details, you know Jython. 
The trouble is I know Java, not 
Python, and I don't want to learn an 
extensive new language that lacks a key 
feature I need: robust support for threads. 

JRuby, which implements Ruby and 
most of its core libraries in Java, is an 
interesting project but still fairly imma- 
ture. A year from now this might repre- 
sent a very viable solution. 

Among the pure scripting languages 
designed with Java in mind, the most 
notable is Groovy, which arises from JSR 
241 and has some good tools. Groovy is 
appealing, but it is only somewhat high- 




er-level than Java. In fact, the language's 
mission statement is to stay close to the 
Java syntax. This is fine for many pur- 
poses, but I want something that really 
removes the cruft of Java syntax, not one 
that reduces it somewhat. 

Rhino is a version of JavaScript that 
compiles to Java and is gener- 
ally embedded into Java 
applications to provide users 
with a scripting engine. Some 
users view it as a scripting 
language for Java, but this 
view greatly underappreci- 
ates the numerous missing 
elements, not least of which 
are threads. 

There are many other 
options. The one I have set- 
tled on receives scant recognition: 
NetRexx, (which is closed-source but 
available at no cost from IBM (www 
.ibm.com/netrexx). The language is 
loosely based on IBM's original scripting 
language, Rexx, but adds features for 
easy integration with Java. (The inter- 
preter/compiler is itself a Java class and 
generates Java bytecodes.) Because Rexx 
long predates Java, NetRexx doesn't feel 
like yet another scripting language. Its 
syntax is remarkably high-level and most 
constructs can be expressed succinctly. It 



can be used as a principally procedural 
language or strictly as an OO language — 
in most cases as both: It has classes, 
inheritance and structured exceptions 
without the busyness that OO imposes. 

NetRexx primitives can map to Java 
objects, but they default to strings. Even 
numbers become arbitrarily long strings. 
This option means that rounding errors 
and floating-point variances do not 
occur. (In fact, if a Java data type is 
used, all overflows generate an error.) 
NetRexx has a substantial library for 
string operations, including parsing rou- 
tines. It also offers a built-in trace capa- 
bility that lists the values of changed 
variables as it logs executed statements. 
And it supports threads! So, far I have 
found it easy to use and at the right lev- 
el for all work I've thrown at it. 

The language is stable and mature. 
Save for a minor change in 2005, the last 
major upgrade was in 2003. This stabili- 
ty derives from the fact that NetRexx 
was close to feature-complete when 
originally designed due to the nearly 20- 
year history of Rexx. The only major 
drawback is that there are few tools for 
NetRexx and the user base is small. 
However, if you're looking for relief 
from code-level complexity but love 
everything else Java brings to the table, 
NetRexx might just be your ticket. I 

Andrew Binstock is the principal analyst 
at Pacific Data Works. 



Stomping on the Bugs 



Bugs are a big deal. They, of course, 
inflate the cost of development. I 
just spent $850 of my client's money — 
and wasted most of a day — tracking 
down what turned out to be a bug in 
ActiveMQ's JMS implementation. (So 
much for "free" software.) Bugs are also 
the main source of security vulnerabili- 
ty in your program. Hackers attack 
bugs — it's that simple. 

Part of the bug problem is address- 
able with process: Test-Driven Devel- 
opment and continuous regression test- 
ing are essential practices. Code reviews 
and pair programming help too. How- 
ever, none of these "best practices" will 
find all the bugs. 

Computer programs that purport to 
find bugs have been around for a while. 
The venerable Unix lint utility did that 
with C programs. Unfortunately, for 
every real bug that lint found, it identi- 
fied 40 or 50 fake bugs, places in the 
code where there was actually nothing 
wrong. This huge number of false posi- 
tives discredited the whole idea of static 
analysis, of having a computer program 
find bugs for you. 

Fortunately for all of us, we've learned 
a lot since Steve Johnson wrote the origi- 
nal lint back in 1977. 1 just installed Find- 
Bugs (findbugs.sourceforge.net), the 
brainchild of Bill Pugh and David Hove- 



meyer at the University of Maryland. This 
is a breathtakingly useful (and free) tool. 

FindBugs finds the sorts of things 
you'd expect. Unread fields, unused vari- 
ables and so forth, but it does a lot more. 

The basic bug analysis is thorough — 
much more so than, say, Eclipse's editor 
is. For example, it flags a pos- 
sible null-pointer dereference 
if a method uses a reference 
that's passed as an argument 
without first explicitly testing 
for null in various ways. That 
is, you can get rid of the error 
by putting an explicit test in 
an "if statement, adding an 
"assert" and so forth. 

FindBugs goes way beyond 
the obvious "correctness" 
problems, though. It can find perfor- 
mance problems, some threading bugs 
(like inconsistent use of synchronization), 
vulnerabilities to hacking, international- 
ization problems and style errors. The 
attack-vulnerability bugs are particularly 
important, since these things slip through 
code reviews all the time, and the conse- 
quences of an attack can be so large. 

I personally consider even the "style" 
problems to be bugs, so I wouldn't turn 
off checking for them, even though Find- 
Bugs does give you the option. One exam- 
ple of a style FindBug checks is if an inner 




class never uses any of the outer-class 
methods or fields and suggests that you 
make it static. To my mind, it's an error for 
this class not to be static since unneces- 
sary runtime overhead is imposed by the 
nonstatic nature of the class. 

Only rarely did FindBugs flag correct 
code as possibly in error — 
maybe one bug out of a hun- 
dred or so (unlike lint, where 
perhaps 95 percent of the 
flagged "errors" were patent- 
ly false alarms). For example, 
FindBugs flagged as an 
"uninitialized read" a line in a 
constructor where I was test- 
ing a field that had been 
explicitly initialized in the 
declaration as null. 
Since FindBugs is looking at the class 
file, not the source code, I can see how it 
wouldn't be able to tell the difference 
between this situation and an actual read 
of an uninitialized field. (Null is the 
default value when there's no initializer, so 
an explicit assignment of null generates no 
code at all — the assignment is effectively 
ignored by the compiler.) More to the 
point, this particular test for null is just 
plain weird — it's not the sort of thing that 
would come up very often in normal code. 
Nonetheless, FindBugs does support 
a "filter" file, which specifies (in XML, 



unfortunately) those bugs that should 
not be reported. The resolution is 
class/method level (i.e., "don't report 
this bug if it occurs in that method of 
that class"). That's a little course grained, 
but would have handled the checking- 
for-null problem I discussed earlier 
without difficulty. That bug was the only 
one of that particular type that occurred 
in the method. 

To ice the cake, FindBugs runs fine 
from the command line, as a GUI utility, 
as an Eclipse plug-in and as an Ant task. 

I think that FindBugs is the best 
thing since peanut butter. It's a spectac- 
ularly useful tool. From this point for- 
ward, I plan to run all my code through 
FindBugs at least once a day, and cor- 
rect literally every problem that it finds. 
All managers everywhere should 
require programmers to do the same. 
I would permit the use of filters for the 
rare spurious bug, but I'd put these 
filters under code review so that sloppy 
programmers couldn't use the mecha- 
nism to hide the fact that they were 
being sloppy. 

Back in the Jurassic, there were a few 
misguided shops that required that all C 
code go through lint without errors, but 
that was insanity. Lint generated too 
much "noise." FindBugs is not lint, how- 
ever. You'd be nuts not to use it. I 

Allen Holub is an architect, consultant 
and instructor in C/C++, Java and OO 
Design. Reach him at www.holub.com. 
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Stand down your battle cruisers. Hol- 
ster those light sabers. Set phasers 
to stun, not kill. There will be no "inter- 
galactic war." 

That's the terminology used by 
Adobe's Jeff Whatcott to describe a 
rift between AJAX and Adobe's Flash 
and Flex technologies, before Adobe 
announced a bridge that links it all 
together. 

Whatcott noted the AJAX 
applications are limited in a 
number of ways, and that 
Adobe's platform can help 
flesh them out. He's not alone 
in that sentiment. 

Phillip Brittan is the vision- 
ary behind a company called 
Droplets, founded in 2000 
and an early entrant into the 
rich Internet application 
space. He spoke for several other defin- 
ers of RIA when he said, "I am glad that 
AJAX is bringing attention to this part of 
the technology world; however, I have 
never been convinced that AJAX or oth- 
er similar approaches are technically 
optimal." 

Consider the differences between 
Google Maps, an AJAX application, and 
Google Earth, a local executable, said 
Brittan. "Google Maps is a cool app, 
but Google Earth is far, far cooler, eas- 
ier to use and more interactive, even 
though both rely primarily on the same 
enormous Internet-based back-end 
content." 

While Google Maps allows you to 
quickly pinpoint a location, zoom in or 
out, or move in various directions, 
Google Earth will point out hotels, busi- 
nesses or schools in a city, and there's a 
community of users sharing their views 
and discussing a broad range of subjects 
from geography to history to unusual 
locations. 

"As powerful as AJAX is, it still can- 



not approach the user experience of 
locally installed software," Brittan 
admitted, "and rich Internet applica- 
tions must be able to bridge that gap 
before they will truly replace the desk- 
top paradigm." 

The early RIA players — Curl, Laszlo, 
Droplets, Macromedia (now Adobe) and 
Nexaweb among them — believed that 
having users download the 
presentation layer onto the 
client made working with 
Web applications easier, in 
that it could eliminate the 
"page refresh" burden of the 
Web, allowing the data to 
flow more quickly. Some 
required that a new propri- 
etary scripting language be 
learned, or that client soft- 
n- rf+Xl ware be downloaded. 
Coach Wei founded Nexaweb in 
2000, and claims to have written an 
AJAX application for himself in 1998. 
AJAX, whose technologies have been 
around for some 10 years, is "more of a 
recognition of a problem than a recogni- 
tion of a solution. But you have to give 
credit to Google. It woke up the busi- 
ness people to the fact that the Web can 
be so much better." 

At its inception, Nexaweb required 
its own thin client that resided in a Java 
applet container to run in any standard 
browser. But last month, it announced it 
would support AJAX. That followed 
Adobe's announcement of the Flex- 
AJAX bridge, which followed an 
announcement by Laszlo that it would 
support AJAX as part of its effort to sup- 
port IBM's OpenAJAX initiative. 

While AJAX has opened the eyes of 
some business executives, it is the 
maturing of the market that is making 
the notion of rich Internet applications a 
reality. Mike Morgan, business develop- 
ment director of Integra, a consulting 



company that acquired early RIA player 
Altio a few years ago, expects the Altio 
brand to re-emerge — with the notion of 
server software handling back-end trans- 
actions and client software handling the 
presentation. "Our client is applet- 
based," said Ben Nathan, the company's 
vice president of engineering who has 
been with Altio from the beginning. 
"You can cache it locally, but there's no 
download required." 

The RIA players all have found their 
niches to build from. For Altio, it's look- 
ing ahead to bring RIAs to mobile 
devices. For Droplets, it's the military. 
Nexaweb has focused less on consumer- 
facing applications and more on enter- 
prise applications, such as those used in 
call centers and financial services orga- 
nizations. 

It seems that everyone is rushing to 
claim the AJAX mantle. RAD tools ven- 
dors are now selling AJAX toolkits. The 
RIA vendors all have embraced the 
term. And at least to Nexaweb's Wei, 
that's good. There are degrees of rich- 
ness required for various applications. 
For an application such as Google Maps, 
where you're simply navigating around a 
region, AJAX is a fine solution. For 
applications that require more robust- 
ness and richer interactivity, a locally 
installed client can do a better job. 
There's room for all of it, in Wei's view. 

"AJAX is a solution to many prob- 
lems, but not them all," he said. 
"JavaScript, Java, Flash, .NET... each 
has strengths and weaknesses. It's up to 
what the customer needs. Users care 
about performance and function of 
applications. To them, it's not about 
AJAX or Java or Flash." 

And there is peace in the RIA 
universe. I 

David Rubinstein is editor-in-chief of 
SD Times. 



Salesforce.com purchased wireless application technology company Sendia in 
early April for an announced US$15 million in cash. A day after the announce- 
ment was made, Salesforce.com announced the release of AppExchange 
Mobile, which the company said uses the Sendia technology to allow App- 
Exchange applications to be offered via Blackberry, Treo and other mobile devices. 
At an event held in San Francisco to herald the acquisition and 
launch, Alex Klyce, former COO of Sendia and current SVP and general manager 
of the AppExchange Mobile Business Unit for Salesforce.com, said that 60 of 
Salesforce.com's 209 AppExchange products currently work on mobile devices 
without modification. "AppExchange Mobile allows developers and partners 
to create applications directly for on-demand and mobile, rather than having 
to first develop an application and then port it to a mobile OS," Klyce said in a 
statement announcing the acquisition. The rest of the AppExchange pantheon 
will be brought into the mobile world over the coming months . . . Seagull 
Software, a company that transforms data from mainframe and older applica- 
tions into SOA-compliant Web services, announced it has purchased the assets 
of Farabi Technology, a Canadian software company that specializes in integra- 



tion products. Included is all of Farabi's intellectual property and HostFront soft- 
ware. Seagull now can add .NET-centric integration and three-tier terminal emu- 
lation from Farabi's HostFront software. The acquisition expands Seagull's geo- 
graphic reach into Canada and the Middle East . . . Flextronics International 
Ltd., an electronics manufacturing services provider, announced last month 
it has agreed to sell its software development and solutions business to an 
affiliate of investment firm Kohlberg Kravis Roberts and Co. for approximate- 
ly US$900 million. Flextronics will retain a 15 percent equity stake in the 
company. The divestiture of the software development and solutions business 
will allow the company to focus on its core business, which includes design, 
vertically integrated manufacturing services, components and logistics, accord- 
ing to Michael McNamara, CEO of Flextronics. The company also announced that 
its board of directors has authorized the repurchase of up to $250 million in 
outstanding ordinary shares of company stock. As of March 31, the company 
reported it had approximately 578 million ordinary shares outstanding. The 
company claimed fiscal-year 2005 revenues of $15.9 billion from sales and 
services in more than 30 countries. I 
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